CVE-2007-3617 | BDVDB-2026-25153 Detail

Description#

The report module in vtiger CRM before 5.0.3 does not properly apply security rules, which allows remote authenticated users to read arbitrary private module entries.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://trac.vtiger.com/cgi-bin/trac.cgi/report/9
http://osvdb.org/45804
http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/2692

Exploit#

No public exploit known

History#

Version 12007-07-06Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.