Tridium Niagara Framework and Enterprise Security Incorrect Permission Assignment Vulnerability

A vulnerability exists in the Tridium Niagara Framework and Niagara Enterprise Security on Windows, prior to versions 4.14.2, 4.15.1, and 4.10.11. This vulnerability involves incorrect permission assignments that can be exploited to bypass access control security levels, potentially leading to unauthorized access or actions within the application.

Impact

Exploitation of this vulnerability could allow for unauthorized access or actions by exploiting incorrectly configured access control security levels.

Remediation

Users are advised to upgrade to Niagara Framework and Enterprise Security versions 4.14.2u2, 4.15.u1, or 4.10u.11.