medium6.5
CVE-2012-1827
The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perform database operat…
Impact
The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perform database operations via a SOAP request, as demonstrated by the initializeQueryDatabase2 request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Efstechnology | Autoform Pdm Archive | through 7.0 Version 6.920 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/49335
- http://www.kb.cert.org/vuls/id/773035
- http://www.kb.cert.org/vuls/id/MAPG-8RQL83
- http://www.securityfocus.com/bid/53716
- http://secunia.com/advisories/49335
- http://www.kb.cert.org/vuls/id/773035
- http://www.kb.cert.org/vuls/id/MAPG-8RQL83
- http://www.securityfocus.com/bid/53716