GE Proficy Real-Time Information Portal Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	57506
Class:	Design Error
CVE:	CVE-2013-0651 CVE-2013-0652
Remote:	Yes
Local:	No
Published:	Jan 22 2013 12:00AM
Updated:	Jan 22 2013 12:00AM
Credit:	Reported by the vendor.
Vulnerable:	General Electric Proficy Real-Time Information Portal 3.5 General Electric Proficy Real-Time Information Portal 3.0 SP1 General Electric Proficy Real-Time Information Portal 3.0 General Electric Proficy Real-Time Information Portal 2.6 General Electric Proficy Real-Time Information Portal 2.5
Not Vulnerable:

GE Proficy Real-Time Information Portal Multiple Information Disclosure Vulnerabilities

The Proficy Real-Time Information Portal is prone to multiple information-disclosure vulnerabilities.

Attackers can exploit these issues to gain access to sensitive information that may aid in further attacks.

GE Proficy Real-Time Information Portal Multiple Information Disclosure Vulnerabilities

Attackers can use a browser to exploit these issues.

GE Proficy Real-Time Information Portal Multiple Information Disclosure Vulnerabilities

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

GE Proficy Real-Time Information Portal Multiple Information Disclosure Vulnerabilities

References:

• Proficy Real-Time Information Portal Homepage (General Electric )