CVE-2012-0236

Advantech WebAccess < 6.0 - Unauthenticated Sensitive Information Exposure via Direct URL Request

Title source: llm

Description

Advantech/BroadWin WebAccess 7.0 and earlier allows remote attackers to obtain sensitive information via a direct request to a URL. NOTE: the vendor reportedly "does not consider it to be a security risk."

References (2)

Core 2

Core References

Patch, US Government Resource x_refsource_misc

http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/52051

Scores

EPSS 0.0024

EPSS Percentile 46.6%

Details

CWE

CWE-200

Status published

Products (2)

advantech/advantech_webaccess 5.0

advantech/advantech_webaccess < 6.0

Published Feb 21, 2012

Tracked Since Feb 18, 2026