CVE-2008-0174

Name of the Vulnerable Software and Affected Versions GE Fanuc Proficy Real-Time Information Portal versions 2.6 and earlier

Description The issue allows remote attackers to steal passwords and gain privileges due to the use of HTTP Basic Authentication, which transmits usernames and passwords in base64-encoded cleartext.

Recommendations For GE Fanuc Proficy Real-Time Information Portal versions 2.6 and earlier, consider disabling the use of HTTP Basic Authentication until a more secure authentication method is implemented. Restrict access to sensitive areas of the portal to minimize the risk of exploitation.