Authorization

2018-07-3114:29:00

PRIOn knowledge base

www.prio-n.com

4.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.1%

JSON

Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Password Server before 7.8.3.

CPENameOperatorVersion
pleasant_password_serverlt7.8.3

CPE	Name	Operator	Version
	pleasant_password_server	lt	7.8.3

References

www.profundis-labs.com/advisories/CVE-2017-17708.txt