Non notée
CVE-2020-12000 The affected product is vulnerable to the handling of serialized data
Description
The affected product is vulnerable to the handling of serialized data. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data on the Ignition 8 Gateway (versions prior to 8.0.10) and Ignition 7 Gateway (versions prior to 7.9.14), allowing an attacker to obtain sensitive information.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Ignition 8 Gateway | Versions non publiées |
Autres CVE de Ignition 8 Gateway
Les 4 CVE de Ignition 8 Gateway →
CVE-2020-10644
The affected product lacks proper validation of user-supplied data, which can result in deserialization of untrusted…
Non notée
CVE-2020-12004
The affected product lacks proper authentication required to query the server on the Ignition 8 Gateway (versions…
Non notée
CVE-2020-10641
An unprotected logging route may allow an attacker to write endless log statements into the database without space…
Non notée