CVE-2023-29463 (published 2023-09-12T16:42:14.868Z)

The JMX Console within the Rockwell Automation Pavilion8 is exposed to application users and does not require authentication. If exploited, a malicious user could potentially retrieve other application users’ session data and or log users out of their session.


Affected products: Vendor: Rockwell Automation
Product: Pavilion8
Versions: <5.20