A bug in CmpUserMgr component can lead to only partially applied security policies. This can result in enabled, anonymous access to components part of the applied security policy.
During installation, installed file permissions are set to allow anyone to modify those files.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Control_for_beaglebone_sl | Codesys | 4.4.0.0 (including) | 4.5.0.0 (excluding) |
| Control_for_beckhoff_cx9020 | Codesys | 4.4.0.0 (including) | 4.5.0.0 (excluding) |
| Control_for_empc-a/imx6_sl | Codesys | 4.4.0.0 (including) | 4.5.0.0 (excluding) |
| Control_for_iot2000_sl | Codesys | 4.4.0.0 (including) | 4.5.0.0 (excluding) |
| Control_for_linux_sl | Codesys | 4.4.0.0 (including) | 4.5.0.0 (excluding) |
| Control_for_pfc100_sl | Codesys | 4.4.0.0 (including) | 4.5.0.0 (excluding) |
| Control_for_pfc200_sl | Codesys | 4.4.0.0 (including) | 4.5.0.0 (excluding) |
| Control_for_raspberry_pi_sl | Codesys | 4.4.0.0 (including) | 4.5.0.0 (excluding) |
| Control_for_wago_touch_panels_600_sl | Codesys | 4.4.0.0 (including) | 4.5.0.0 (excluding) |
| Control_runtime_system_toolkit | Codesys | 3.5.17.0 (including) | 3.5.18.0 (excluding) |