CVE-2004-1611

SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary…

published February 20, 2005

CVSS
—
EPSS
2%
Percentile
75.2
In the wild
Unconfirmed
What it is

SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary SLX commands on the server or spoof the server via a man-in-the-middle (MITM) attack, or (2) obtain the database password via a GetConnection request to TCP port 1707.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01581 · 75.2th percentile
Published
2005-02-20T05:00Z
EPSS history
Timeline
  • 20 FEB 05:00Z
    SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary…
    cvelistv5