Detections
Analytics
CVE-2022-30694
medium
Description
The login endpoint /FormLogin in affected web services does not apply proper origin checking. This could allow authenticated remote attackers to track the activities of other users via a login cross-site request forgery attack.
References
https://cert-portal.siemens.com/productcert/pdf/ssa-478960.pdf