CVE Daily

CVE-2012-2455

Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the reg...

Medium CVSS 6.4

Overview

Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors.

CWE: CWE-264 Published: 2012-11-10T00:55:03.257
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.4 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags