PT-2005-2709 · Proms · Proms

Published 2005-05-24 · Updated 2008-09-10 · CVE-2005-1737

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PROMS version 0.11

Description The issue allows non-authorized users to view or modify the project member list and modify the todos list.

Recommendations For PROMS version 0.11, update to a version that includes fixes for these issues, as the current version allows unauthorized access and modifications to sensitive project data.

Fix

Related Identifiers

CVE-2005-1737

Affected Products

Proms

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-1737 · Security Note
• http://securitytracker.com/id?1013992 · Vendor Advisory
• http://projects.electricmonk.nl//files/PROMS/proms-0.11.tar.gz · Note
• http://projects.electricmonk.nl/proms.php?action=ReleaseOverview&project_id=2&release_id=91 · Note