Schweitzer Engineering Laboratories Blueframe Software Vulnerability Allowing Unauthorized Username Modifications

A vulnerability exists in the Blueframe software suite by Schweitzer Engineering Laboratories, specifically within the Blueframe OS version 1.12.0 and several applications and extensions that are part of the Blueframe ecosystem. This vulnerability allows an authenticated administrator to alter the 'Created By' username associated with a user account, potentially leading to unauthorized changes in user account management and oversight.

Impact

Exploitation of this vulnerability could result in unauthorized modifications of user account details, specifically the 'Created By' username, which could be misused for account management and oversight purposes.

Remediation

Users can update to Blueframe OS version 1.13.0 or later, where this vulnerability has been addressed. For details on the update process, refer to the Blueframe OS release notes.