CVE-2015-0991: Infoleak
Published Apr 3, 2015
·Updated
Inductive Automation Ignition 7.7.2 allows remote attackers to obtain sensitive information by reading an error message about an unhandled exception, as demonstrated by pathname information.
Affected Software
1 affected component
inductiveautomation Ignition=7.7.2
Event History
Apr 3, 2015
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-0991?
CVE-2015-0991 has a medium severity rating due to its potential to reveal sensitive information.
2
How do I fix CVE-2015-0991?
To mitigate CVE-2015-0991, update to a later version of Inductive Automation Ignition that addresses this vulnerability.
3
What type of attacks can exploit CVE-2015-0991?
CVE-2015-0991 can be exploited by remote attackers to obtain sensitive information through unhandled exception error messages.
4
Is CVE-2015-0991 specific to any particular software version?
Yes, CVE-2015-0991 specifically affects Inductive Automation Ignition version 7.7.2.
5
What are the implications of CVE-2015-0991 for organizations using Ignition 7.7.2?
Organizations using Ignition 7.7.2 may be at risk of exposing sensitive information, making them vulnerable to further attacks.