Vulnerability in Ge Intelligent Platforms Proficy Real-Time Information Portal
CVE-2013-0651
The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request.
EPSS: 0.013 (67.6th percentile) — read the EPSS interpretation.
Affected products
- Ge Intelligent_platforms_proficy_real-time_information_portal — versions 2.6, 3.0, 3.5
- N/a — versions n/a
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)