PT-2005-2708 · Proms · Proms

Published 2005-05-24 · Updated 2008-09-05 · CVE-2005-1736

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PROMS version 0.11

Description The issue arises from the improper handling of certain combinations of rights, resulting in users having more rights than intended.

Recommendations For PROMS version 0.11, consider restricting user rights to the minimum required for their roles until a proper fix is implemented.

Fix

Related Identifiers

CVE-2005-1736

Affected Products

Proms

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2005-1736 · Security Note
• http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz · Note
• http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91 · Note