A vulnerability has been identified in Teamcenter Active Workspace V4 (All versions < V4.3.9), Teamcenter Active Workspace V5.0 (All versions < V5.0.7), Teamcenter Active Workspace V5.1 (All versions < V5.1.4). By sending malformed requests, a remote attacker could leak an application token due to an error not properly handled by the system.
[
{
"product": "Teamcenter Active Workspace V4",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions < V4.3.9"
}
]
},
{
"product": "Teamcenter Active Workspace V5.0",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions < V5.0.7"
}
]
},
{
"product": "Teamcenter Active Workspace V5.1",
"vendor": "Siemens",
"versions": [
{
"status": "affected",
"version": "All versions < V5.1.4"
}
]
}
]