CVE-2020-14520 - The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 (all versions prior to 8.0.13)

Back Back to CVE browser

HIGH

The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 (all versions prior to 8.0.13)

Published Jul 31, 2020

7.5

HIGH

CVSS 3.1

EPSS 1.15%

Description

The affected product is vulnerable to an information leak, which may allow an attacker to obtain sensitive information on the Ignition 8 (all versions prior to 8.0.13).

Affected products

Vendor n/a Product Ignition 8 Default
n/a
- Version
  All versions prior to 8.0.13
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Ignition 8

n/a

Version	Status	Constraints
All versions prior to 8.0.13	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-862

Missing Authorization

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6656
Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-212-01
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6656		Advisory
https://us-cert.cisa.gov/ics/advisories/icsa-20-212-01		x_refsource_MISCThird Party AdvisoryUS Government Resource