CVE-2017-17708

2018-07-3114:00:00

mitre

www.cve.org

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.1%

JSON

Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Password Server before 7.8.3.

References

www.profundis-labs.com/advisories/CVE-2017-17708.txt