CVE-2012-2455

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.osvdb.org/85499", "name": "85499", "tags": [], "refsource": "OSVDB"}, {"url": "http://secunia.com/advisories/50508", "name": "50508", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://seclists.org/fulldisclosure/2012/Sep/62", "name": "20120906 Authentication flaw in APS-Soft DTE Axiom (CVE-2012-2455)", "tags": [], "refsource": "FULLDISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-264"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2012-2455", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 6.4, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 4.9, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2012-11-10T00:55Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:advance_productivity_software:dte_axiom:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true, "versionEndIncluding": "12.3.2"}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2012-11-12T05:00Z"}