Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-2455
cve-2012-2455
advanced productivity software
dte axiom
authentication bypass
remote attack
data security
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
67.9%
Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors.
Affected configurations
Node
advance_productivity_softwaredte_axiomRange≤12.3.2
| CPE | Name | Operator | Version |
|---|---|---|---|
| advance_productivity_software:dte_axiom | advance productivity software dte axiom | le | 12.3.2 |
Related
prion
prion
Authentication flaw
2012-11-10 00:55:00
cvelist
cvelist
CVE-2012-2455
2022-10-03 16:15:38
nvd
nvd
CVE-2012-2455
2012-11-10 00:55:03
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.1 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
67.9%
Related for CVE-2012-2455