Dolibarr Improper Authentication Vulnerability - CVE-2017-8879 - Vulnerability Database

Dolibarr Improper Authentication Vulnerability - CVE-2017-8879

Medium

Reference: CVE-2017-8879

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2017-8879

Title: Dolibarr Improper Authentication Vulnerability

Overview:

Dolibarr ERP/CRM 4.0.4 allows password changes without supplying the current password which makes it easier for physically proximate attackers to obtain access via an unattended workstation.