Subnet Solutions PowerSYSTEM Center incorrect authorization exposes admin resources to low-privileged users
Regular users of PowerSYSTEM Center can see admin-only data!
Summary
Incorrect authorization in PowerSYSTEM Center lets a low-privileged, authenticated user access resources normally limited to administrators. The 2020, 2024 and 2026 lines are affected.
Affected when
- Low-privileged authenticated account
What to do
Update 2020 to Update 30, 2024 to PowerSYSTEM Center 2026 Update 1.1, and 2026 to Update 1.1 or later.
Update to at least the version for your product:
- Subnet Solutions PowerSYSTEM Center 2020 Update 30 or later
- Subnet Solutions PowerSYSTEM Center 2024 PowerSYSTEM Center 2026 Update 1.1 or later
- Subnet Solutions PowerSYSTEM Center 2026 Update 1.1 or later
Products and platforms
CVE IDs
Times
First published
First seen