flarepoint vulnerabilities

2 known vulnerabilities in flarepoint from Bottelet. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  DaybydayCRM: Missing Authorization

  CVE-2022-22111Jan 5, 2022BotteletEPSS 1.03%

  In DayByDay CRM, version 2.2.0 is vulnerable to missing authorization. Any application user in the application who has update user permission enabled is able to change the password of other users, including the administrator’s. This allows the attacker to gain

• 7.5 High severity

  DaybydayCRM: Weak Password Requirements

  CVE-2022-22110Jan 5, 2022BotteletEPSS 1.16%

  In Daybyday CRM, versions 1.1 through 2.2.0 enforce weak password requirements in the user update functionality. A user with privileges to update his password could change it to a weak password, such as those with a length of a single character. This may allow