Directory Traversal in Tridium Niagara AX Framework

CVE-2012-4027

What is CVE-2012-4027?

A directory traversal vulnerability exists in the Tridium Niagara AX Framework, enabling remote attackers to gain unauthorized access to sensitive files beyond designated directories. This security flaw is due to improper permission settings, which can be exploited to read critical configuration files, such as the config.bog file, potentially leading to further security compromises. Businesses utilizing the Niagara AX Framework should assess their security posture and apply necessary updates or mitigations.

References