CVE-2012-1828
published 2012-06-13CVE-2012-1828: The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform…
PriorityP431medium6.5CVSS 2.0
AVNACLAuSCPIPAP
EPSS
1.57%
72.4th percentile
The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| efstechnology | autoform_pdm_archive | <= 7.0 | — |
| efstechnology | autoform_pdm_archive | <= 6.920 | — |
| efstechnology | autoform_pdm_archive | — | — |
| efstechnology | autoform_pdm_archive | — | — |
CVSS provenance
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
vulncheck6.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-c8cc-954v-xv37: AutoFORM PDM Archive before 7
ghsa_unreviewed·2022-05-17·CVSS 6.5
CVE-2012-3347 [MEDIUM] GHSA-c8cc-954v-xv37: AutoFORM PDM Archive before 7
AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment mechanism, a different vulnerability than CVE-2012-1828.
GHSA
GHSA-w94q-728v-qj2f: The administrative functions in AutoFORM PDM Archive before 7
ghsa_unreviewed·2022-05-17
CVE-2012-1828 [MEDIUM] GHSA-w94q-728v-qj2f: The administrative functions in AutoFORM PDM Archive before 7
The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.
VulnCheck
AutoFORM PDM Archive before 7.0 Remote Security Bypass
vulncheck·2012·CVSS 6.5
CVE-2012-3347 [MEDIUM] AutoFORM PDM Archive before 7.0 Remote Security Bypass
AutoFORM PDM Archive before 7.0 Remote Security Bypass
AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment mechanism, a different vulnerability than CVE-2012-1828.
Affected: efstechnology autoform_pdm_archive
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Known Ransomware Campaign Use: Known
Exploitation References: https://nsarchive.gwu.edu/sites/default/files/documents/5986978/National-Security-Archive-Department-of-Justice.pdf; https://www
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://secunia.com/advisories/49335http://www.kb.cert.org/vuls/id/773035http://www.kb.cert.org/vuls/id/MAPG-8RQL83http://www.securityfocus.com/bid/53716http://secunia.com/advisories/49335http://www.kb.cert.org/vuls/id/773035http://www.kb.cert.org/vuls/id/MAPG-8RQL83http://www.securityfocus.com/bid/53716
2012-06-13
Published