AVEVA Edge has an information disclosure vulnerability

AVEVA Edge is a highly scalable and flexible HMI/SCADA software from AVEVA Software (UK).An information disclosure vulnerability exists in AVEVA Edge version 2020 R2, which could be exploited by an attacker to gain access to external DB resource configuration by spoofing the user’s Windows access token that is leaked when AVEVA Edge is running. account information.