CVE-2012-1828
The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization...
CVE-2012-1828 is a medium vulnerability (CVSS 6.5) in Efstechnology Autoform Pdm Archive, published June 13, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.56%, the 75th percentile. No source names a fixed version.
The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.
Exploit likelihood
What each source reports
NVD Score used
The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.
- Record
CVE-2012-1828- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.
- Record
CVE-2012-1828- Updated
- 2026-11-02
EUVDEUVD-2012-1838 No score
The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.
- Record
EUVD-2012-1838- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-w94q-728v-qj2f No score
The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization...
The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.
- Record
GHSA-w94q-728v-qj2f- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |