PT-2020-14054 · Inductive Automation · Ignition 8

Published 2020-07-31 · Updated 2020-08-11 · CVE-2020-14520

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Ignition 8 versions prior to 8.0.13

Description The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information.

Recommendations For versions prior to 8.0.13, update to version 8.0.13 or later to resolve the issue.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2020-14520

Affected Products

Ignition 8

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2020-14520 · Security Note
• https://osv.dev/vulnerability/CVE-2020-14520 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsa-20-212-01 · Note