CVE-2012-1828: Efstechnology Autoform Pdm Archive

Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days.

The administrative functions in AutoFORM PDM Archive before 7.1 do not have authorization requirements, which allows remote authenticated users to perform administrative actions by leveraging knowledge of a hidden function, as demonstrated by the password-change function.

Affected products

• Efstechnology Autoform Pdm Archive: up to and including 7.0; version 6.920 only

Published 2012-06-13. Last modified 2026-06-16.