Описание
The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perform database operations via a SOAP request, as demonstrated by the initializeQueryDatabase2 request.
Ссылки
- US Government Resource
- US Government Resource
- US Government Resource
- US Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 7.0 (включая)
Одно из
cpe:2.3:a:efstechnology:autoform_pdm_archive:*:*:*:*:*:*:*:*
cpe:2.3:a:efstechnology:autoform_pdm_archive:6.920:*:*:*:*:*:*:*
EPSS
Процентиль: 78%
0.01184
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-264
Связанные уязвимости
github
больше 3 лет назад
The web service in AutoFORM PDM Archive before 7.1 does not have authorization requirements, which allows remote authenticated users to perform database operations via a SOAP request, as demonstrated by the initializeQueryDatabase2 request.
EPSS
Процентиль: 78%
0.01184
Низкий
6.5 Medium
CVSS2
Дефекты
CWE-264