PT-2008-1820 · Ge Fanuc · Ge Fanuc Proficy Real-Time Information Portal

Eyal Udassin · Published 2008-01-29 · Updated 2024-02-14 · CVE-2008-0174

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions GE Fanuc Proficy Real-Time Information Portal versions 2.6 and earlier

Description The issue allows remote attackers to steal passwords and gain privileges due to the use of HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext.

Recommendations For GE Fanuc Proficy Real-Time Information Portal versions 2.6 and earlier, consider disabling the use of HTTP Basic Authentication until a more secure authentication method is implemented. Restrict access to sensitive areas of the portal to minimize the risk of exploitation.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2008-0174

Affected Products

Ge Fanuc Proficy Real-Time Information Portal

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2008-0174 · Security Note
• http://kb.cert.org/vuls/id/180876 · Note
• http://securitytracker.com/id?1019273 · Note
• http://securityfocus.com/archive/1/487244/100/0/threaded · Note
• http://support.gefanuc.com/support/index?page=kbchannel&id=KB12459 · Note
• http://securityreason.com/securityalert/3590 · Note
• http://securityfocus.com/archive/1/487075/100/0/threaded · Note
• http://securityfocus.com/bid/30754 · Note