PT-2020-7225 · Arial · Campaign Enterprise

Catatonic · Published 2020-01-10 · Updated 2020-01-22 · CVE-2012-3821

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Arial Software Campaign Enterprise version 11.0.551

Description A security issue exists in the activate.asp page, allowing a remote malicious user to modify the SerialNumber field.

Recommendations For version 11.0.551, consider restricting access to the activate.asp page until a fix is available. As a temporary workaround, avoid using the SerialNumber field in the affected page to minimize the risk of exploitation.

Exploit

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2012-3821

Affected Products

Campaign Enterprise

References · 6

• 🔥 https://securityfocus.com/archive/1/524462 · Exploit
• 🔥 http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-3821 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79508 · Note
• http://archives.neohapsis.com/archives/bugtraq/2012-10/0103.html · Note
• https://securityfocus.com/bid/56117/info · Note