PT-2007-4872 · Vtiger · Vtiger Crm

Published 2007-07-06 · Updated 2008-11-13 · CVE-2007-3617

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions vtiger CRM versions prior to 5.0.3

Description The issue concerns the report module in vtiger CRM, where security rules are not properly applied. This allows remote authenticated users to read arbitrary private module entries.

Recommendations For versions prior to 5.0.3, update to version 5.0.3 or later to resolve the issue.

Fix

Related Identifiers

CVE-2007-3617

Affected Products

Vtiger Crm

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-3617 · Security Note
• http://trac.vtiger.com/cgi-bin/trac.cgi/report/9 · Patch
• http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/2692 · Note
• http://osvdb.org/45804 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3617 · Note