medium5.0
CVE-2012-3024
Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication …
Impact
Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tridium | Niagara Ax | through 3.6 |