CVE-2017-17708

Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Password Server before 7.8.3.

Score

CVSS 3.0 4.3 Medium

Status

Modified - cve@mitre.org

Published

2018-07-31

Last modified

2024-08-05

Weaknesses

CWE-863

Affected products

• Pleasant Password Server (Pleasantsolutions)

References

• https://www.profundis-labs.com/advisories/CVE-2017-17708.txt