← Back to browse · API

CVE-2022-35869

Severity
HIGH
CVSS
7.5
EPSS
0.60292
Risk score
51.1
CISA KEV
No
PoC
No
Published
2022-07-25
Modified
2024-08-03
First seen
2026-08-08
Aliases
EUVD-2022-38742, GHSA-RMF7-VJ4C-J2C9
Products
Inductive Automation:Ignition 8.1.15 (b2022030114)
Sources
euvd EUVD-2022-38742

Description

This vulnerability allows remote attackers to bypass authentication on affected installations of Inductive Automation Ignition 8.1.15 (b2022030114). Authentication is not required to exploit this vulnerability. The specific flaw exists within com.inductiveautomation.ignition.gateway.web.pages. The issue results from the lack of proper authentication prior to access to functionality. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-17211.

References