PT-2015-5012
CVE-2015-0994
·
تاريخ النشر
2015-04-03
·
تاريخ التحديث
2015-04-03
الوصف من
CVSS 2.0
4.0
متوسطةالمقاييسAV:N/AC:L/Au:S/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Inductive Automation Ignition version 7.7.2
Description
The issue allows remote authenticated users to bypass a brute-force protection mechanism. This is achieved by using different session ID values in a series of HTTP requests.
Recommendations
For Inductive Automation Ignition version 7.7.2, consider implementing additional security measures to prevent brute-force attacks, such as limiting the number of login attempts from a single IP address within a certain time frame, until a patch is available.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾