medium5.0
CVE-2013-0651
The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insuffici…
Impact
The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ge | Intelligent Platforms Proficy Real-Time Information Portal | All versions Versions 2.6, 3.0, 3.5 |