news.mlab.sh
Back to the feed
vulnerability

Inductive Automation Ignition

High
Summary

A vulnerability in Inductive Automation Ignition versions 8.1.53 and earlier allows any authenticated user to create projects. This was due to a default-value configuration. The fix, version 8.1.54, restricts project creation to Designer sessions. Users on older versions can remediate by setting the ‘Create Project Role(s)’ setting to match their Designer Role.

Read the full article at CISA Advisories

Summary written automatically in our own words from the original article, which belongs to its publisher and remains the reference. It may contain errors. Sources & data

Report an error
Confirmed errors are fixed and listed on /corrections.