PT-2022-23000
CVE-2022-35890
·
تاريخ النشر
2022-07-15
·
تاريخ التحديث
2022-07-21
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Inductive Automation Ignition versions 7.9.19 and earlier, 8.x versions prior to 8.1.17
Description
An issue was discovered where Designer and Vision Client Session IDs are mishandled, allowing an attacker to determine which session IDs were generated in the past and then hijack sessions assigned to these IDs.
Recommendations
For Inductive Automation Ignition versions 7.9.19 and earlier, update to version 7.9.20 or later.
For Inductive Automation Ignition 8.x versions prior to 8.1.17, update to version 8.1.17 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾