CVE-2007-3604 | BDVDB-2026-25140 Detail

Description#

vtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard menu to bypass data restrictions and read the pipeline of the entire organization, possibly involving modules/Potentials/Potentials.php.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/3196
http://forums.vtiger.com/viewtopic.php?p=44717
http://trac.vtiger.com/cgi-bin/trac.cgi/report/9
http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/10423
http://osvdb.org/45783

Exploit#

No public exploit known

History#

Version 12007-07-06Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.