CVE-2012-1256

CVE-2012-1256 describes an authentication bypass vulnerability in the single sign-on (SSO) implementation of EasyVista versions prior to 2010.1.1.89. Remote attackers can exploit this by manipulating the url_account parameter and providing a valid login name in the SSPI_HEADER parameter to index.php. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity, allowing for partial confidentiality impact without requiring authentication. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.