{"id":"CVE-2012-2455","aliases":["EUVD-2012-2441","GHSA-4hgj-q2x7-8h69"],"status":"published","title":"Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID,...","description":"Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors.","severity":{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01411,"percentile":0.72857,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-264"],"published":"2012-11-10T00:00:00Z","modified":"2026-06-16T23:41:35Z","products":[{"vendor":"advance_productivity_software","product":"dte_axiom"}],"references":[{"url":"http://seclists.org/fulldisclosure/2012/Sep/62","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"http://secunia.com/advisories/50508","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.osvdb.org/85499","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-2455"},{"url":"https://github.com/advisories/GHSA-4hgj-q2x7-8h69"}],"sources":{"cve":[{"id":"CVE-2012-2455","description":"Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors.","status":"published","published":"2012-11-10T00:00:00Z","modified":"2024-09-16T17:49:29.867Z","updated_at":"2026-11-02T14:34:50.263482Z"}],"euvd":[{"id":"EUVD-2012-2441","description":"Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors.","status":"published","published":"2012-11-10T00:00:00Z","modified":"2024-09-16T17:49:29Z","updated_at":"2026-11-03T00:55:38.288771Z"}],"ghsa":[{"id":"GHSA-4hgj-q2x7-8h69","title":"Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID,...","description":"Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors.","status":"published","published":"2022-05-17T05:18:47Z","modified":"2023-01-28T05:03:54Z","updated_at":"2026-11-02T14:44:04.026586Z"}],"nvd":[{"id":"CVE-2012-2455","description":"Advanced Productivity Software DTE Axiom before 12.3.3 does not validate the registration ID, which allows remote attackers to bypass authentication and read or modify data about users, customers, and projects via unspecified vectors.","status":"published","published":"2012-11-10T00:55:03.257Z","modified":"2026-06-16T23:41:35.33Z","cvss":[{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-264"],"updated_at":"2026-11-02T14:02:16.536025Z"}]}}