Vulnerability Description
vtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard menu to bypass data restrictions and read the pipeline of the entire organization, possibly involving modules/Potentials/Potentials.php.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Vtiger | Vtiger Crm | <= 5.0.2 |
References
- http://forums.vtiger.com/viewtopic.php?p=44717
- http://osvdb.org/45783
- http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/10423Patch
- http://trac.vtiger.com/cgi-bin/trac.cgi/report/9
- http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/3196
- http://forums.vtiger.com/viewtopic.php?p=44717
- http://osvdb.org/45783
- http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/10423Patch
- http://trac.vtiger.com/cgi-bin/trac.cgi/report/9
- http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/3196
FAQ
What is CVE-2007-3604?
CVE-2007-3604 is a vulnerability with a CVSS score of 4.0 (MEDIUM). vtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard menu to bypass data restrictions and read the pipeline of the entire organization, possibly involving m...
How severe is CVE-2007-3604?
CVE-2007-3604 has been rated MEDIUM with a CVSS base score of 4.0/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2007-3604?
Check the references section above for vendor advisories and patch information. Affected products include: Vtiger Vtiger Crm.