Vulnerabilities > CVE-2011-4555 - Credentials Management vulnerability in Oneclickorgs ONE Click Orgs

047910
CVSS 4.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
NONE
Integrity impact
NONE
Availability impact
PARTIAL
network
low complexity
oneclickorgs
CWE-255

Summary

One Click Orgs before 1.2.3 does not require unique e-mail addresses for user accounts, which allows remote authenticated users to cause a denial of service (login disruption) or spoof votes or comments by selecting a conflicting e-mail address.

Common Weakness Enumeration (CWE)