CVE-2017-17708 Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Password Server before 7.8.3.
MediumCVSS 4.3
EPSS 0.58%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Because of insufficient authorization checks it is possible for any authenticated user to change profile data of other users in Pleasant Password Server before 7.8.3.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| pleasantsolutions pleasant password server | < 7.8.3 | 7.8.3 |
References
- www.profundis-labs.com exploit third-party-advisory