CVE-2012-2455 Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and...
MediumCVSS 6.4
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| advance productivity software dte axiom | <= 12.3.2 | No fix listed |
References
- 20120906 Authentication flaw in APS-Soft DTE Axiom (CVE-2012-2455) mailing-list
- 50508 third-party-advisory vendor-advisory
- 85499 vdb-entry