Authentication Bypass Vulnerability in Inductive Automation Ignition

CVE-2022-35869

What is CVE-2022-35869?

A vulnerability has been identified in Inductive Automation Ignition that enables remote attackers to bypass authentication without needing valid credentials. This issue stems from inadequate authentication checks, particularly within the com.inductiveautomation.ignition.gateway.web.pages module. By exploiting this flaw, an attacker can gain unauthorized access to system functionalities, raising significant security concerns. For more information, refer to the advisories linked in the Zero Day Initiative and Inductive Automation support documentation.

References