Security Advisory
CVE-2012-1828
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.