GE Intelligent Platforms Proficy Real-Time Information Portal does not restrict access to methods of an unspecified Java class, which allows remote attackers to obtain a username listing via an RMI call.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Intelligent_platforms_proficy_real-time_information_portal | Ge | - (including) | - (including) |
| Intelligent_platforms_proficy_real-time_information_portal | Ge | 2.6 (including) | 2.6 (including) |
| Intelligent_platforms_proficy_real-time_information_portal | Ge | 3.0 (including) | 3.0 (including) |
| Intelligent_platforms_proficy_real-time_information_portal | Ge | 3.0-sp1 (including) | 3.0-sp1 (including) |
| Intelligent_platforms_proficy_real-time_information_portal | Ge | 3.5 (including) | 3.5 (including) |
| Intelligent_platforms_proficy_real-time_information_portal | Ge | 3.5-sp1 (including) | 3.5-sp1 (including) |