description: Incorrect permissions are set to default on the ‘Project Management’ page of WebAccess/SCADA portal of WebAccess/SCADA Versions 9.0.1 and prior, which may allow a low-privileged user to update an administrator’s password and login as an administrator to escalate privileges on the system.
problem types: INCORRECT PERMISSION ASSIGNMENT FOR CRITICAL RESOURCE CWE-732
affected:
{
product: Advantech WebAccess/SCADA
vendor: n/a
versions:
status: affected, version: WebAccess/SCADA Versions 9.0.1 and prior
}