CVE-2012-4028 Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication...
HighCVSS 7.8
EPSS 1.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Tridium niagara ax | All versions | No fix listed |
References
- www.washingtonpost.com permissions-required
- www.tridium.com broken-link vendor-advisory