CVE-2007-3599

vtiger CRM before 5.0.3 allows remote authenticated users to import and export the information for a contact even when they only have the View permission.

Score

CVSS 2.0 8.5 High

Status

Modified - cve@mitre.org

Published

2007-07-06

Last modified

2024-08-07

Affected products

• Vtiger Crm (Vtiger)

References

• http://osvdb.org/45781
• http://trac.vtiger.com/cgi-bin/trac.cgi/report/9
• http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/2968