Unrated severityNVD Advisory· Published May 26, 2015· Updated May 6, 2026
CVE-2015-1013
CVE-2015-1013
Description
OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL (AF) Trusted Users group lacks the Everyone account, which allows remote authenticated users to bypass intended command restrictions via SQL statements.
Affected products
2- cpe:2.3:a:osisoft:pi_sql_for_af:2.1.2.19:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- ics-cert.us-cert.gov/advisories/ICSA-15-132-01nvdThird Party AdvisoryUS Government Resource
- techsupport.osisoft.com/Troubleshooting/Alerts/AL00280nvdVendor Advisory
News mentions
0No linked articles in our index yet.