medium6.5
CVE-2012-1828
The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform admi…
Impact
The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Efstechnology | Autoform Pdm Archive | through 7.0 Version 6.920 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/49335
- http://www.kb.cert.org/vuls/id/773035
- http://www.kb.cert.org/vuls/id/MAPG-8RQL83
- http://www.securityfocus.com/bid/53716
- http://secunia.com/advisories/49335
- http://www.kb.cert.org/vuls/id/773035
- http://www.kb.cert.org/vuls/id/MAPG-8RQL83
- http://www.securityfocus.com/bid/53716