Vulnerabilities > CVE-2007-3604 - Unspecified vulnerability in Vtiger CRM

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

vtiger

NVD

Published: 2007-07-06

Updated: 2024-11-21

Summary

vtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard menu to bypass data restrictions and read the pipeline of the entire organization, possibly involving modules/Potentials/Potentials.php.

Vulnerable Configurations

Part	Description	Count
Application	Vtiger Vtiger Vtiger CRM 1.0 Vtiger Vtiger CRM 2.0 Vtiger Vtiger CRM 2.0.1 Vtiger Vtiger CRM 2.1 Vtiger Vtiger CRM 3.0 Vtiger Vtiger CRM 3.2 Vtiger Vtiger CRM 4 Vtiger Vtiger CRM 4.0 Vtiger Vtiger CRM 4.0.1 Vtiger Vtiger CRM 4.2 Vtiger Vtiger CRM 4.2.4 Vtiger Vtiger CRM 5 Vtiger Vtiger CRM 5.0 Vtiger Vtiger CRM 5.0.0 Vtiger Vtiger CRM 5.0.1 Vtiger Vtiger CRM 5.0.2	26

References

http://forums.vtiger.com/viewtopic.php?p=44717
http://forums.vtiger.com/viewtopic.php?p=44717
http://osvdb.org/45783
http://osvdb.org/45783
http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/10423
http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/10423
http://trac.vtiger.com/cgi-bin/trac.cgi/report/9
http://trac.vtiger.com/cgi-bin/trac.cgi/report/9
http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/3196
http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/3196