Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
security:lcsec18-01 [2018-07-02 13:25] Martin Berg |
security:lcsec18-01 [2018-12-02 22:09] (current) |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Security update for Lime CRM Server ====== | ====== Security update for Lime CRM Server ====== | ||
| ; Bulletin ID : LCSEC18-01 | ; Bulletin ID : LCSEC18-01 | ||
| - | ; Date published : 2018-07-03 | + | ; Date published : 2018-07-05 |
| ; Priority : 2 | ; Priority : 2 | ||
| - | ; Severity : Important | + | ; Severity : Critical |
| | | ||
| Priority and severity ratings are determined as described [[security: | Priority and severity ratings are determined as described [[security: | ||
| | | ||
| ===== Summary ===== | ===== Summary ===== | ||
| - | This security update resolves a vulnerability in Lime CRM Server. The vulnerability could allow remote code execution in Lime CRM Server if an attacker alters the system configuration in a malicious way. However, | + | This security update resolves a vulnerability in Lime CRM Server. The vulnerability could allow remote code execution in Lime CRM Server if an attacker alters the system configuration in a malicious way. However, an attacker would need access to a user account with administrator privileges in order to succeed with exploiting the vulnerability. |
| - | + | ||
| - | This security update is rated Important for Lime CRM Server on all supported operating systems. | + | |
| ===== Affected versions ===== | ===== Affected versions ===== | ||
| ^ Product | ^ Product | ||
| - | | Lime CRM Server | + | | Lime CRM Server |
| ===== Solution ===== | ===== Solution ===== | ||
| Line 20: | Line 18: | ||
| ^ Product | ^ Product | ||
| - | | Lime CRM Server | + | | Lime CRM Server |
| - | | Lime CRM Server | + | | Lime CRM Server |
| ===== Vulnerability information ===== | ===== Vulnerability information ===== | ||