NVD

Id
55754  
Name
CVE-2007-3604  
Description
vtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard menu to bypass data restrictions and read the pipeline of the entire organization, possibly involving modules/Potentials/Potentials.php.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2007-07-06  
Modified Date
2008-11-13  
Seq
2007-3604  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
283470 55754 CVE-2007-3604 http://forums.vtiger.com/viewtopic.php?p=44717  View
283471 55754 CVE-2007-3604 http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/10423  View
283472 55754 CVE-2007-3604 http://trac.vtiger.com/cgi-bin/trac.cgi/report/9  View
283473 55754 CVE-2007-3604 http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/3196  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57131 JVNDB-2007-005823 vtiger CRM におけるデータ制限を回避される脆弱性 vtiger CRM は、modules/Potentials/Potentials.php に関する処理に不備があるため、データ制限を回避される、および全組織のパイプラインを読まれる脆弱性が存在します。 CVE-2007-3604 26959 CVE-2007-3604 55754 4 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005823.html 2007-03-07 2012-12-20 View