Unscored CVE-2012-2455 EUVD-2012-2441GHSA-4hgj-q2x7-8h69

Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authe…

Published Nov 10, 2012 · Updated Sep 16, 2024 · Assigned by mitre

Description

Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors.

References

20120906 Authentication flaw in APS-Soft DTE Axiom (CVE-2012-2455) mailing-list
50508 third-party-advisory
85499 vdb-entry