Description

A flaw was found in Ignition. The Perspective module fails to properly validate session privileges when determining Designer-level access. An authenticated attacker with access to a Vision project can supply a valid session identifier to obtain elevated Designer privileges. This can be exploited to execute arbitrary code in the context of the Ignition Gateway process.

Mitigation

Aliases