Cleartext Credential Transmission Vulnerability in Tridium Niagara AX Framework
CVE-2012-3025

Currently unrated

Key Information:

Vendor

Tridium

Status
Niagara Ax
Vendor
CVE Published:
16 August 2012

What is CVE-2012-3025?

The default configuration of Tridium's Niagara AX Framework version 3.6 utilizes a cleartext base64 encoding method for transmitting credentials within cookies. This improper handling allows remote attackers to intercept and access sensitive information by monitoring network traffic. Organizations utilizing this framework are encouraged to implement secure communication practices to protect against this vulnerability and safeguard user credentials from unauthorized access.

References

http://www.tridium.com/cs/tridium_news/security_patch_36
x_refsource_CONFIRM
http://www.us-cert.gov/control_systems/pdf/ICSA-12-228-01...
x_refsource_MISC

Timeline

  • Vulnerability Reserved

  • Vulnerability published

.