Threats tagged 'ghsa-g9qx-c69p-gqxc'

Eclipse Kura versions 5.0.0 through 5.6.2 contain a vulnerability in the Wire Graph update functionality of the Kura Web UI and the Wire Service REST API v1. An authenticated user with only Wires management permissions can modify or replace configurations of components outside the Wire Graph, including security-relevant components. This can lead to escalation to full administrative privileges and potential device disruption. The vulnerability requires at least one Driver installed on the device. The issue is fixed in version 5.6.3.