Notified: February 22, 2012 Updated: May 10, 2012
Affected
To ascertain whether you are vulnerable please check your version number as displayed on the top right of the login page. Issue 1 is fixed in AutoFORM PDM Archive 7.1 - released 4th May 2012. Issue 2 is fixed in AutoFORM PDM Archive 7.1 - released 4th May 2012. Issue 3 is fixed in AutoFORM PDM Archive 7.0 - released 9th November 2011. Issue 4 is fixed in AutoFORM PDM Archive 6.920 - released 9th November 2010. All vulnerable customers are advised to contact EFS Technology and arrange an upgrade to the latest version.
We are not aware of further vendor information regarding this vulnerability.