VULNERABILITY INTELLIGENCE

CVE-2012-1828

CVSS score6.5 MEDIUM
EPSS probability1.57%
CISA KEVNot currently listed
Published2012-06-13
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.

Primary references