Lucene search
GoogleOSV:GHSA-5X4J-XCMV-V3Q2HistoryMay 13, 2022 - 1:47 a.m.
Dolibarr allows password changes without supplying the current password
2022-05-1301:47:44
Google
osv.dev
4
Dolibarr ERP/CRM 4.0.4 allows password changes without supplying the current password, which makes it easier for physically proximate attackers to obtain access via an unattended workstation.
| CPE | Name | Operator | Version |
|---|---|---|---|
| dolibarr/dolibarr | eq | 4.0.4 |
Related
osv
osv
CVE-2017-8879
2017-05-10 14:29:00
ubuntucve
ubuntucve
CVE-2017-8879
2017-05-10 00:00:00
veracode
veracode
Unauthorized Password Change
2017-05-26 08:29:22
github
github
Dolibarr allows password changes without supplying the current password
2022-05-13 01:47:44
prion
prion
Design/Logic Flaw
2017-05-10 14:29:00
cvelist
cvelist
CVE-2017-8879
2022-10-03 16:23:06
nvd
nvd
CVE-2017-8879
2017-05-10 14:29:00
cve
cve
CVE-2017-8879
2022-10-03 16:23:06
openvas
openvas
Dolibarr <= 4.0.4 Multiple Vulnerabilities - Active Check
2017-05-15 00:00:00