CVE-2013-0651

The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request.

Date published : 2013-01-27

http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-01.pdf