CVE-2020-10641CWE-284

An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication

published April 28, 2020

CVSS
—
EPSS
1%
Percentile
69.8
In the wild
Unconfirmed
What it is

An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication. This results in consuming the entire available hard-disk space on the Ignition 8 Gateway (versions prior to 8.0.10), causing a denial-of-service condition.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01278 · 69.8th percentile
Weakness
CWE-284 · Improper Access Control
Published
2020-04-28T18:22Z
EPSS history
Timeline
  • 28 APR 18:22Z
    An unprotected logging route may allow an attacker to write endless log statements into the database without space limits or authentication
    cvelistv5