SSA-035466 V1.0: Incorrect Permission Assignment in SICAM PAS/PQS

SICAM PAS/PQS is affected by insecure permission assignments in application folders that could allow an authenticated local attacker to read and modify configuration data or to escalate privileges.

Siemens has prepared a security patch and recommends to run it on affected systems to fix the permissions of the impacted folders. This security patch will be integral part of the upcoming SICAM PAS/PQS V8.22 and later versions.

application attacker configuration data fix folders insecure local patch permission permissions privileges run security security patch siemens ssa systems