Back
CVE-2007-1923
(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows…
High7.5EPSS 2.6%
- Published
- Updated
- Reserved
- Assigned by
- mitre
Description
(1) LedgerSMB and (2) DWS Systems SQL-Ledger implement access control lists by changing the set of URLs linked from menus, which allows remote attackers to access restricted functionality via direct requests. The LedgerSMB affected versions are before 1.3.0.
Scores
| Scored by | CVSS | Score | Vector |
|---|---|---|---|
| NVDNVD · Modified | 2.0 | High7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
- EPSS (exploitation in 30 days)
- 2.6% · top 15% of all CVEs (4 Nov 2026)
Loading the EPSS history…
The list uses the assigner's score when there is one, then CISA's, then NVD's: High 7.5.
Weakness
- n/a
Affected products
n/a
- affected n/a
References (7)
- 38218 (opens in a new tab)vdb-entryx_transferred
- sqlledger-acl-weak-security(33494) (opens in a new tab)vdb-entryx_transferred
- 2552 (opens in a new tab)third-party-advisoryx_transferred
- 38217 (opens in a new tab)vdb-entryx_transferred
- 23352 (opens in a new tab)vdb-entryx_transferred
- 20070406 ACLS ineffective in SQL-Ledger and LedgerSMB (opens in a new tab)mailing-listx_transferred
- https://github.com/ledgersmb/LedgerSMB/blob/master/Changelog (opens in a new tab)x_transferred
Sources
The same CVE in the primary databases and aggregators, to check against.
- CVE.org record (opens in a new tab)
- CVE List JSON (GitHub) (opens in a new tab)
- NVD (opens in a new tab)
- FIRST EPSS (opens in a new tab)
- OSV.dev (opens in a new tab)
- GitHub Advisories (opens in a new tab)
- CIRCL Vulnerability-Lookup (opens in a new tab)
Badge for a README or a ticket
[](https://trackcve.app/cve/CVE-2007-1923)Record last updated .