[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNt24iVe_t5R_IHJ-4HB-NWh80ZjQ73f7UAApTSer73o":3,"g5a-risk:CVE-2012-3025":110},{"success":4,"data":5,"meta":108},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":36,"affectedProducts":37,"affectedProductsCount":43,"references":44,"referencesCount":62,"weaknesses":63,"weaknessesCount":43,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":71,"seoMetadata":72,"configurations":97,"relatedVendorCves":106,"notableEvents":107},"CVE-2012-3025","What is CVE-2012-3025?","The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows remote attackers to obtain sensitive information by sniffing the network.","The default configuration of Tridium Niagara AX Framework through 3.6 uses a cleartext base64 format for transmission of credentials in cookies, which allows...","2012-08-16T10:38:04.75","2026-06-16T23:42:31.913",5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":32,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"MEDIUM",10,2.9,false,[],0.01925,[34,34,34,34,34,34,34],"Medium",[38],{"vendor":39,"product":40,"version":41,"criteria":42,"vulnerable":4},"tridium","niagara_ax","*","cpe:2.3:a:tridium:niagara_ax:*:*:*:*:*:*:*:*",1,[45,52,58,60],{"url":46,"source":47,"tags":48},"http:\u002F\u002Fwww.tridium.com\u002Fcs\u002Ftridium_news\u002Fsecurity_patch_36","Tridium",[49,50,51],"Broken Link","Patch","Vendor Advisory",{"url":53,"source":54,"tags":55},"http:\u002F\u002Fwww.us-cert.gov\u002Fcontrol_systems\u002Fpdf\u002FICSA-12-228-01.pdf","Us-cert",[49,56,57],"Third Party Advisory","US Government Resource",{"url":46,"source":47,"tags":59},[49,50,51],{"url":53,"source":54,"tags":61},[49,56,57],4,[64],{"id":65,"name":66,"description":67,"extendedDescription":27,"status":68,"abstraction":69,"structure":70},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","Incomplete","Class","Simple",[],{"title":73,"metaDescription":74,"keywords":75,"canonicalUrl":76,"structuredData":77},"What is CVE-2012-3025? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2012-3025, a medium severity cyber security vulnerability from 2012. The default configuration of Tridium Niagara AX Framework ...","CVE-2012-3025, CVE-2012-3025 vulnerability, CVE-2012-3025 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2012, CVSS score, exploit, patch, remediation, tridium security, niagara_ax vulnerability","\u002Fwhat-is\u002Fcve-2012-3025",{"@context":78,"@type":79,"headline":73,"description":74,"datePublished":10,"dateModified":11,"author":80,"publisher":84,"about":88,"mainEntityOfPage":92,"articleSection":95,"keywords":96},"https:\u002F\u002Fschema.org","TechArticle",{"@type":81,"name":82,"url":83},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":81,"name":82,"url":83,"logo":85},{"@type":86,"url":87},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":89,"name":6,"description":90,"additionalType":91},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":93,"@id":94},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2012-3025","Cybersecurity","CVE-2012-3025, CVE-2012-3025 vulnerability, CVE-2012-3025 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[98],{"Operator":28,"Negate":28,"Nodes":99},[100],{"Operator":101,"Negate":32,"CPEMatch":102},"OR",[103],{"Vulnerable":4,"Criteria":42,"MatchCriteriaID":104,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":105},"17E94F3E-0096-417B-AD89-80838F856EB0","3.6",[],[],{"lastModified":11,"cacheTime":109,"version":22},1792383474654,{"score":111,"band":112,"action":113,"scoredAt":114},19,"Info","Track","2026-10-17T06:39:00.892162+00:00"]