PT-2005-2708 · Proms · Proms

Publicado 2005-05-24 · Atualizado 2008-09-05 · CVE-2005-1736

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PROMS version 0.11

Description The issue arises from the improper handling of certain combinations of rights, resulting in users having more rights than intended.

Recommendations For PROMS version 0.11, consider restricting user rights to the minimum required for their roles until a proper fix is implemented.

Correção

Identificadores relacionados

CVE-2005-1736

Produtos afetados

Proms

Referências · 3

• http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1736 · Nota de Segurança
• http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91 · Nota