Unrated severityNVD Advisory· Published Jun 13, 2012· Updated Apr 29, 2026
CVE-2012-3347
CVE-2012-3347
Description
AutoFORM PDM Archive before 7.0 implements user accounts in a way that allows for JMX Console authentication, which allows remote authenticated users to bypass intended access restrictions via the /jmx-console URI, and then upload and execute arbitrary JSP code via a JBoss remote-deployment mechanism, a different vulnerability than CVE-2012-1828.
Affected products
2cpe:2.3:a:efstechnology:autoform_pdm_archive:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:efstechnology:autoform_pdm_archive:*:*:*:*:*:*:*:*range: <=6.920
- cpe:2.3:a:efstechnology:autoform_pdm_archive:6.9:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.kb.cert.org/vuls/id/773035nvdUS Government Resource
- www.kb.cert.org/vuls/id/MAPG-8RQL83nvdUS Government Resource
- secunia.com/advisories/49335nvd
News mentions
0No linked articles in our index yet.