Vulnerability Details : CVE-2004-1611
SalesLogix 6.1 does not verify if a user is authenticated before performing sensitive operations, which could allow remote attackers to (1) execute arbitrary SLX commands on the server or spoof the server via a man-in-the-middle (MITM) attack, or (2) obtain the database password via a GetConnection request to TCP port 1707.
Exploit prediction scoring system (EPSS) score for CVE-2004-1611
Probability of exploitation activity in the next 30 days: 1.11%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 83 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2004-1611
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
5.1
|
MEDIUM | AV:N/AC:H/Au:N/C:P/I:P/A:P |
4.9
|
6.4
|
NIST |
References for CVE-2004-1611
Products affected by CVE-2004-1611
- cpe:2.3:a:best_software:saleslogix:*:*:*:*:*:*:*:*
- cpe:2.3:a:saleslogix_corporation:saleslogix:2000.0:*:*:*:*:*:*:*