Lucene search
HistoryJul 06, 2007 - 7:30 p.m.
CVE-2007-3600
cve
2007
3600
wordplugin
vtiger crm
security bypass
field level security
email template
7.3 High
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
0.007 Low
EPSS
Percentile
79.6%
WordPlugin in the wordintegration component in vtiger CRM before 5.0.3 allows remote authenticated users to bypass field level security permissions and merge arbitrary fields in an Email template, as demonstrated by the fields in the Contact module.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vtiger:vtiger_crm | vtiger vtiger crm | le | 5.0.2 |
7.3 High
AI Score
Confidence
Low
4 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
0.007 Low
EPSS
Percentile
79.6%
Related for CVE-2007-3600