CVE-2012-3025: Medium severity Tridium Niagara AX vulnerability
The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-3025?
CVE-2012-3025 is considered a medium severity vulnerability due to its impact on credential confidentiality.
How do I fix CVE-2012-3025?
To fix CVE-2012-3025, update your Tridium Niagara AX Framework to a version beyond 3.6 that addresses this vulnerability.
What type of data is exposed in CVE-2012-3025?
CVE-2012-3025 exposes sensitive credential information due to the use of cleartext base64 encoding in cookies.
Who is affected by CVE-2012-3025?
CVE-2012-3025 affects users of Tridium Niagara AX Framework versions 3.6 and earlier.
How can CVE-2012-3025 be exploited?
CVE-2012-3025 can be exploited by remote attackers who can sniff network traffic to capture sensitive information.