NVD

Id
45506  
Name
CVE-2012-4028  
Description
Tridium Niagara AX Framework does not properly store credential data, which allows context-dependent attackers to bypass intended access restrictions by using the stored information for authentication.  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-07-16  
Modified Date
2012-12-04  
Seq
2012-4028  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
228497 45506 CVE-2012-4028 http://www.washingtonpost.com/investigations/tridiums-niagara-framework-marvel-of-connectivity-illustrates-new-cyber-risks/2012/07/11/gJQARJL6dW_story.html  View
228498 45506 CVE-2012-4028 https://www.tridium.com/galleries/briefings/NiagaraAX_Framework_Software_Security_Alert.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27398 JVNDB-2012-003105 Tridium Niagara AX Framework におけるアクセス制限を回避される脆弱性 Tridium Niagara AX Framework は、資格情報を適切に保存しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2012-4028 57266 CVE-2012-4028 45506 7.8 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003105.html 2012-07-13 2012-12-07 View