This vulnerability, classified as CWE-862 (Missing Authorization), affects AVEVA Pipeline Integrity Monitor. It allows an unauthenticated attacker to access read-only data intended exclusively for PIMBoards users, resulting in unauthorized information disclosure. The vulnerability does not permit write or modification operations. The CVSS 4.0 base score is 6.9, reflecting network attack vector, low complexity, no privileges or user interaction required, and limited confidentiality impact. No vendor advisory or patch information is currently provided, and the product is not a cloud service.

An unauthenticated attacker can read sensitive information intended only for authorized users of PIMBoards within the Pipeline Integrity Monitor product. This leads to confidentiality loss but does not affect data integrity or availability. There is no indication of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected system and monitor for unauthorized access attempts. No official fix or temporary workaround has been published by the vendor at this time.