PT-2009-5774 · Joomla · Icrm Basic

Published 2009-09-30 · Updated 2009-10-01 · CVE-2009-3481

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions com icrmbasic version 1.4.2.31

Description A certain interface in the iCRM Basic component for Joomla does not require administrative authentication. This issue has unspecified impact and can be exploited remotely.

Recommendations For version 1.4.2.31, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2009-3481

Affected Products

Icrm Basic

References · 4

• http://secunia.com/advisories/36892 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-3481 · Security Note
• http://securityfocus.com/bid/36533 · Note
• http://osvdb.org/58382 · Note