The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control, which allows remote attackers to read configuration files, and discover data-source credentials, via a direct request.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Intelligent_platforms_proficy_real-time_information_portal | Ge | - (including) | - (including) |
| Intelligent_platforms_proficy_real-time_information_portal | Ge | 2.6 (including) | 2.6 (including) |
| Intelligent_platforms_proficy_real-time_information_portal | Ge | 3.0 (including) | 3.0 (including) |
| Intelligent_platforms_proficy_real-time_information_portal | Ge | 3.0-sp1 (including) | 3.0-sp1 (including) |
| Intelligent_platforms_proficy_real-time_information_portal | Ge | 3.5 (including) | 3.5 (including) |
| Intelligent_platforms_proficy_real-time_information_portal | Ge | 3.5-sp1 (including) | 3.5-sp1 (including) |