InduSoft Web Studio < v7.1 + SP2 + P2 Security System Vulnerability
medium Nessus Network Monitor Plugin ID 8260
Synopsis
A version of InduSoft Web Studio containing a vulnerability in its security system has been detected.
Description
InduSoft Web Studio versions prior to v7.1 + SP2 + P2 do not save changes to the security system if they are made by the Thin Client. This may mislead an administrator into thinking that security settings have been saved when they have not been and that the system is more secure than it really is.
Solution
Upgrade to InduSoft WebStudio v7.1 + SP2 + P2 or later.