CVE-2012-3025 The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive infor...
MediumCVSS 5.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Tridium niagara ax | <= 3.6 | No fix listed |
References
- www.tridium.com broken-link patch vendor-advisory
- www.us-cert.gov broken-link third-party-advisory us-government-resource