CVE-2015-1013 | BDVDB-2026-69579 Detail

Description#

OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL (AF) Trusted Users group lacks the Everyone account, which allows remote authenticated users to bypass intended command restrictions via SQL statements.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00280
https://ics-cert.us-cert.gov/advisories/ICSA-15-132-01

Exploit#

No public exploit known

History#

Version 12015-05-26Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.