CVE-2007-1923

Published 10 Apr 2007 · Updated 07 Aug 2024

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 2.7%

(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0.

Affected products

n/a · n/a

References

http://osvdb.org/38217 http://osvdb.org/38218 http://securityreason.com/securityalert/2552 https://exchange.xforce.ibmcloud.com/vulnerabilities/33494 https://github.com/ledgersmb/LedgerSMB/blob/master/Changelog http://www.securityfocus.com/archive/1/464880/100/0/threaded http://www.securityfocus.com/bid/23352