Security Advisory

CVE-2012-3024

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2012-08-16 10:00:00
Last updated 2024-09-16 20:03:44
Assigner icscert
State PUBLISHED

Description

Tridium Niagara AX Framework through 3.6 uses predictable values for (1) session IDs and (2) keys, which might allow remote attackers to bypass authentication via a brute-force attack.