SSA-656895: Open Redirect Vulnerability in Teamcenter
The SSO login service in Teamcenter contains an open redirect vulnerability that could allow an attacker to redirect the legitimate user to an attacker-chosen URL to steal valid session data. Siemens has released new versions for the affected products and recommends to update to the latest versions.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-23363US | — | — | ||
A vulnerability has been identified in Teamcenter V14.1 (All versions), Teamcenter V14.2 (All versions), Teamcenter V14.3 (All versions < V14.3.0.14), Teamcenter V2312 (All version… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (12)
- MitigationTeamcenter V14.1
Do not click on links from untrusted sources
- MitigationTeamcenter V14.2
Do not click on links from untrusted sources
- MitigationTeamcenter V14.3
Do not click on links from untrusted sources
- MitigationTeamcenter V2312
Do not click on links from untrusted sources
- MitigationTeamcenter V2406
Do not click on links from untrusted sources
- MitigationTeamcenter V2412
Do not click on links from untrusted sources
- BehobenTeamcenter V14.1
Apply the hot fix as described in Software Field Bulletin PL8837639 ( https://support.sw.siemens.com/en-US/product/282219420/knowledge-base/PL8837639)
- BehobenTeamcenter V14.2
Apply the hot fix as described in Software Field Bulletin PL8837639 ( https://support.sw.siemens.com/en-US/product/282219420/knowledge-base/PL8837639)
- BehobenTeamcenter V14.3
Update to V14.3.0.14 or later version
https://support.sw.siemens.com/product/282219420/ - BehobenTeamcenter V2312
Update to V2312.0010 or later version
https://support.sw.siemens.com/product/282219420/ - BehobenTeamcenter V2406
Update to V2406.0008 or later version
https://support.sw.siemens.com/product/282219420/ - BehobenTeamcenter V2412
Update to V2412.0004 or later version
https://support.sw.siemens.com/product/282219420/
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan