CVE-2012-1827 The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perform database operations via a SOAP request, as demonstrated....
MediumCVSS 6.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perform database operations via a SOAP request, as demonstrated by the initializeQueryDatabase2 request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| efstechnology autoform pdm archive | <= 7.0 | No fix listed |
| efstechnology autoform pdm archive | = 6.920 | No fix listed |
References
- 49335 third-party-advisory
- VU#773035 third-party-advisory us-government-resource
- www.kb.cert.org us-government-resource
- 53716 vdb-entry