Description
The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.
Unscored
CVE-2012-3025
EUVD-2012-3003GHSA-wg6r-jqr9-2745
The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in coo…
Published Aug 16, 2012 · Updated Sep 16, 2024 · Assigned by icscert