description: A vulnerability has been identified in SICAM GridEdge Essential ARM (All versions < V2.6.6), SICAM GridEdge Essential Intel (All versions < V2.6.6), SICAM GridEdge Essential with GDS ARM (All versions < V2.6.6), SICAM GridEdge Essential with GDS Intel (All versions < V2.6.6). The affected software discloses password hashes of other users upon request. This could allow an authenticated user to retrieve another users password hash.
problem types: CWE-402: Transmission of Private Resources into a New Sphere ('Resource Leak')
affected:
{
product: SICAM GridEdge Essential ARM
vendor: Siemens
versions:
status: affected, version: All versions < V2.6.6
}
{
product: SICAM GridEdge Essential Intel
vendor: Siemens
versions:
status: affected, version: All versions < V2.6.6
}
{
product: SICAM GridEdge Essential with GDS ARM
vendor: Siemens
versions:
status: affected, version: All versions < V2.6.6
}
{
product: SICAM GridEdge Essential with GDS Intel
vendor: Siemens
versions:
status: affected, version: All versions < V2.6.6
}
