A vulnerability exists in the affected products that allows a threat actor to create a project and become the administrator for it. If exploited, a threat actor could create, modify, and delete their own project.Referenceshttps://www.rockwellautomation.com/en-us/trust-center/security-advisories/advisory.SD1702.html
