Beveiligingsadvies
CVE-2012-1828
CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations
Beschrijving
The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.