CVE-2022-35869

Name of the Vulnerable Software and Affected Versions Inductive Automation Ignition version 8.1.15 (b2022030114)

Description This issue allows remote attackers to bypass authentication on affected installations. The flaw exists within com.inductiveautomation.ignition.gateway.web.pages due to the lack of proper authentication prior to access to functionality. An attacker can leverage this to bypass authentication on the system.

Recommendations For version 8.1.15 (b2022030114), consider restricting access to the com.inductiveautomation.ignition.gateway.web.pages functionality until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.