VULNERABILITY INTELLIGENCE

CVE-2007-2849

CVSS score10 HIGH
EPSS probability2.71%
CISA KEVNot currently listed
Published2007-05-24
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Description

KnowledgeTree Document Management (aka KnowledgeTree Open Source) before STABLE 3.3.7 does not require a password for an unregistered user, when the user exists in Active Directory, which allows remote attackers to log onto KTDMS without the intended authorization check.

Primary references