PT-2020-7228 · Unknown · Arial Campaign Enterprise

Catatonic · Published 2020-01-10 · Updated 2020-01-15 · CVE-2012-3824

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Arial Campaign Enterprise versions prior to 11.0.551

Description The issue allows multiple pages to be accessible without proper authentication or authorization, potentially leading to unauthorized access to sensitive information.

Recommendations For versions prior to 11.0.551, update to version 11.0.551 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive pages until the update can be applied.

Exploit

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2012-3824

Affected Products

Arial Campaign Enterprise

References · 4

• 🔥 http://sadgeeksinsnow.blogspot.dk/2012/10/my-first-experiences-bug-hunting-part-2.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2012-3824 · Security Note
• https://t.me/cibsecurity/9118 · Telegram Post
• https://exchange.xforce.ibmcloud.com/vulnerabilities/79506 · Note