RSS   Podatności dla 'Ignition'   RSS

2022-04-01
 
CVE-2020-14479

CWE-306
 
 
Sensitive information can be obtained through the handling of serialized data. The issue results from the lack of proper authentication required to query the server

 
2015-04-03
 
CVE-2015-0995

 
 
Inductive Automation Ignition 7.7.2 uses MD5 password hashes, which makes it easier for context-dependent attackers to obtain access via a brute-force attack.

 
 
CVE-2015-0994

 
 
Inductive Automation Ignition 7.7.2 allows remote authenticated users to bypass a brute-force protection mechanism by using different session ID values in a series of HTTP requests.

 
 
CVE-2015-0993

 
 
Inductive Automation Ignition 7.7.2 does not terminate a session upon a logout action, which allows remote attackers to bypass intended access restrictions by leveraging an unattended workstation.

 
 
CVE-2015-0992

 
 
Inductive Automation Ignition 7.7.2 stores cleartext OPC Server credentials, which allows local users to obtain sensitive information via unspecified vectors.

 
 
CVE-2015-0991

 
 
Inductive Automation Ignition 7.7.2 allows remote attackers to obtain sensitive information by reading an error message about an unhandled exception, as demonstrated by pathname information.

 
 
CVE-2015-0976

 
 
Cross-site scripting (XSS) vulnerability in Inductive Automation Ignition 7.7.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

 

 >>> Vendor: Inductiveautomation 2 Produkty
Ignition
Ignition gateway

Copyright 2024, cxsecurity.com

 

Back to Top