CVEvulnerability
CVE-2012-2455
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-11-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors.
Affected configurations
• advance productivity software dte axiom (<= 12.3.2)
Related
Weakness · not in database (1)
References
- http://seclists.org/fulldisclosure/2012/Sep/62 seclists.org
- http://secunia.com/advisories/50508 Vendor Advisory
- http://www.osvdb.org/85499 www.osvdb.org
- http://seclists.org/fulldisclosure/2012/Sep/62 seclists.org
- http://secunia.com/advisories/50508 Vendor Advisory
- http://www.osvdb.org/85499 www.osvdb.org