Lucene search
IcscertCVELIST:CVE-2012-3025HistoryOct 03, 2022 - 4:15 p.m.
CVE-2012-3025
2022-10-0316:15:22
icscert
www.cve.org
tridium niagara ax
cleartext base64
credentials transmission
cookie
remote attackers
sensitive information
network sniffing
The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.
Related
nvd
nvd
CVE-2012-3025
2012-08-16 10:38:04
prion
prion
Default configuration
2012-08-16 10:38:00
nessus
nessus
Tridium Niagra Unspecified Vulnerability
2020-08-10 00:00:00
Tridium Niagara AX Insufficiently Protected Credentials (CVE-2012-3025)
2023-03-21 00:00:00
Tridium Niagara AX Web Server Multiple Vulnerabilities
2013-07-03 00:00:00
cve
cve
CVE-2012-3025
2022-10-03 16:15:22
ics
ics
Tridium Niagara Vulnerabilities (Update A)
2014-03-06 12:00:00