CVE-2012-2455

N/A

Descricao

Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado11/10/2012

Ultima modificacao4/11/2025

Fontenvd

Avistamentos honeypot0

Produtos afetados

advance_productivity_software:dte_axiom

Fraquezas (CWE)

CWE-264

Referencias

http://seclists.org/fulldisclosure/2012/Sep/62(cve@mitre.org)

http://secunia.com/advisories/50508(cve@mitre.org)

http://www.osvdb.org/85499(cve@mitre.org)

http://seclists.org/fulldisclosure/2012/Sep/62(af854a3a-2127-422b-91ae-364da2661108)

http://secunia.com/advisories/50508(af854a3a-2127-422b-91ae-364da2661108)

http://www.osvdb.org/85499(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.