CVE-2016-4834

modules/Users/actions/Save.php in Vtiger CRM 6.4.0 and earlier does not properly restrict user-save actions, which allows remote authenticated users to create…

published August 1, 2016

CVSS
—
EPSS
2%
Percentile
82.3
In the wild
Unconfirmed
What it is

modules/Users/actions/Save.php in Vtiger CRM 6.4.0 and earlier does not properly restrict user-save actions, which allows remote authenticated users to create or modify user accounts via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02207 · 82.3th percentile
Published
2016-08-01T01:00Z
EPSS history
Timeline
  • 01 AUG 01:00Z
    modules/Users/actions/Save.php in Vtiger CRM 6.4.0 and earlier does not properly restrict user-save actions, which allows remote authenticated users to create…
    cvelistv5