https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 30 Sep 2026 02:46:23 +0000 https://vulnerability.circl.lu/vuln/bdu:2023-06520 bdu:2023-06520 https://vulnerability.circl.lu/vuln/bdu:2023-06520 https://vulnerability.circl.lu/vuln/cve-2023-4816 <p><strong>Affected:</strong> Hitachi Energy Asset Suite 9</p> <p>A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password validation in T214. This vulnerability can be exploited by an authenticated user per-forming an Equipment Tag Out holder action (Accept, Release, and Clear) for another user and entering an arbitrary password in the holder action confirmation dialog box. Despite entering an arbitrary password in the confirmation box, the system will execute the selected holder action.</p> <p><strong>Affected:</strong> Hitachi Energy Asset Suite 9</p> <p>A vulnerability exists in the Equipment Tag Out authentication, when configured with Single Sign-On (SSO) with password validation in T214. This vulnerability can be exploited by an authenticated user per-forming an Equipment Tag Out holder action (Accept, Release, and Clear) for another user and entering an arbitrary password in the holder action confirmation dialog box. Despite entering an arbitrary password in the confirmation box, the system will execute the selected holder action.</p> https://vulnerability.circl.lu/vuln/cve-2023-4816