CVE-2013-0651 Information

Description

The Portal installation process in GE Intelligent Platforms Proficy Real-Time Information Portal stores sensitive information under the web root with insufficient access control which allows remote attackers to read configuration files and discover data-source credentials via a direct request.

Reference

http://www.us-cert.gov/control_systems/pdf/ICSA-13-022-01.pdf