CVE-2012-0236

Published: Feb 21, 2012Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Advantech/BroadWin WebAccess 7.0 and earlier allows remote attackers to obtain sensitive information via a direct request to a URL. NOTE: the vendor reportedly "does not consider it to be a security risk."

Affected (2)

Products: Advantech: Advantech Webaccess

Advantech

1 product

Advantech Webaccess

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Advantech Advantech Webaccess	Up to 6.0
Advantech Advantech Webaccess	Version 5.0

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (4)

http://www.securityfocus.com/bid/52051

Source: cret@cert.org

http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf

Source: cret@cert.org

PatchUS Government Resource

http://www.securityfocus.com/bid/52051

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf

Source: af854a3a-2127-422b-91ae-364da2661108

PatchUS Government Resource

Timeline

No history available yet.