CVE-2013-0651: ge intelligent_platforms_proficy_real-time_information_portal

Vulnerability summary

CVE-2013-0651 is a medium (CVSS 5.0) vulnerability in ge intelligent_platforms_proficy_real-time_information_portal. EPSS estimates a 1.31% chance of exploitation in the next 30 days, higher than 70.3% of scored vulnerabilities.

Timeline

1. 27-01-2013
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request.

• CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.