CVE-2012-1828 The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledg...
MediumCVSS 6.5
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| efstechnology autoform pdm archive | <= 7.0 | No fix listed |
| efstechnology autoform pdm archive | = 6.920 | No fix listed |
References
- 49335 third-party-advisory
- VU#773035 third-party-advisory us-government-resource
- www.kb.cert.org us-government-resource
- 53716 vdb-entry