CVE-2012-2455

Published: Nov 10, 2012Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors.

Affected (1)

Products: Advance Productivity Software: Dte Axiom

Advance Productivity Software

1 product

Dte Axiom

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Advance Productivity Software Dte Axiom	version ≤ 12.3.2

Related CWEs

CWE-264

References (6)

http://seclists.org/fulldisclosure/2012/Sep/62

Source: cve@mitre.org

http://secunia.com/advisories/50508

Source: cve@mitre.org

Vendor Advisory

http://www.osvdb.org/85499

Source: cve@mitre.org

http://seclists.org/fulldisclosure/2012/Sep/62

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/50508

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.osvdb.org/85499

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.