CVE-2015-0992 — Sensitive Information Exposure in Ignition

CWE-200 — Sensitive Information Exposure3 documents3 sources
Severity
2.1LOWNVD
EPSS
0.1%
top 81.95%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Inductiveautomation Ignition
Timeline
PublishedApr 3
Latest updateMay 17

Description

Inductive Automation Ignition 7.7.2 stores cleartext OPC Server credentials, which allows local users to obtain sensitive information via unspecified vectors.

CVSS vector

AV:L/AC:L/C:P/I:N/A:NExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-cjp4-r8mp-227x: Inductive Automation Ignition 7↗2022-05-17
▶
CVEList
CVE-2015-0992: Inductive Automation Ignition 7↗2015-04-03
▶
CVE-2015-0992 — Sensitive Information Exposure | cvebase