Inductive Automation Ignition访问控制错误漏洞 漏洞详情

漏洞类型: 访问控制错误

危险级别: 高危

CVE编号: CVE-2020-12004

CNVD编号: CNVD-2020-34645

CNNVD编号: CNNVD-202005-1328

发布时间: 2020-05-26

CVSS评分: 4.958451119999999

ignition_gateway *

ignition_gateway *

The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9.14), allowing an attacker to obtain sensitive information.

1. 厂商已发布了漏洞修复程序，请及时关注更新： https://inductiveautomation.com/downloads/releasenotes/8.0.10 厂商已发布了漏洞修复程序，请及时关注更新： https://inductiveautomation.com/downloads/releasenotes/8.0.10