PT-2012-3572

Name of the Vulnerable Software and Affected Versions AutoFORM PDM Archive versions prior to 7.1 Description The issue concerns a lack of authorization requirements in the web service of the affected software. This allows remote authenticated users to perform database operations via a SOAP reques...

CVE-2012-1827: Undefined Security Weakness

The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perform database operations via a SOAP request, as demonstrated by the initializeQueryDatabase2 request...