The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perform database operations via a SOAP request, as demonstrated by the initializeQueryDatabase2 request.
References
Link | Resource |
---|---|
http://www.kb.cert.org/vuls/id/773035 | US Government Resource |
http://www.kb.cert.org/vuls/id/MAPG-8RQL83 | US Government Resource |
http://secunia.com/advisories/49335 | |
http://www.securityfocus.com/bid/53716 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2012-06-13 12:55
Updated : 2012-09-28 20:17
NVD link : CVE-2012-1827
Mitre link : CVE-2012-1827
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
efstechnology
- autoform_pdm_archive