Lucene search
HistoryJan 10, 2005 - 5:00 a.m.
CVE-2004-1228
sugarcrm
sugar sales
cve-2004-1228
mysql
security vulnerability
denial of service
installation form
nvd
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
7 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.3%
The install scripts in SugarCRM Sugar Sales 2.0.1c and earlier are not removed after installation, which allows attackers to obtain the MySQL administrative password in cleartext from an installation form, or to cause a denial of service by changing database settings to the default.
Affected configurations
Node
sugarcrmsugar_salesRange≤2.0.1c
| CPE | Name | Operator | Version |
|---|---|---|---|
| sugarcrm:sugar_sales | sugarcrm sugar sales | le | 2.0.1c |
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:N/A:P
7 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
70.3%
Related for CVE-2004-1228