CVE-2013-0651

CVSS 5.0 - MEDIUM

Description

The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request.

Affected Products

Vendor	Product	Version
ge	intelligent_platforms_proficy_real-time_information_portal	`-`
ge	intelligent_platforms_proficy_real-time_information_portal	`2.6`
ge	intelligent_platforms_proficy_real-time_information_portal	`3.0`
ge	intelligent_platforms_proficy_real-time_information_portal	`3.0`
ge	intelligent_platforms_proficy_real-time_information_portal	`3.5`
ge	intelligent_platforms_proficy_real-time_information_portal	`3.5`

References

http://www.us-cert.gov/control_systems/pdf/ICSA-13...

Weakness Types

CWE-264

CVE Information

CVE ID:: CVE-2013-0651
Published:: 2013-01-27
Modified:: 2026-04-29
CVSS Score:: 5.0
Severity:: MEDIUM
Vector:: AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected Vendors

Quick Actions

View on NVD Find Similar CVEs

CVSS Severity Scale

0.0 - 3.9 LOW

4.0 - 6.9 MEDIUM

7.0 - 8.9 HIGH

9.0 - 10.0 CRITICAL