Lucene search

[email protected]CVE-2011-0745

HistoryMar 16, 2011 - 10:55 p.m.

CVE-2011-0745

2011-03-1622:55:02

CWE-20

[email protected]

web.nvd.nist.gov

sugarcrm

cve-2011-0745

security vulnerability

information security

customer names

contact names

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.738

Percentile

98.1%

JSON

SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or (2) the names of contact persons via a ShowDuplicates action to the Contacts module, reachable through index.php.

Affected configurations

NVD

Node

sugarcrmsugarcrmRange≤6.1.2

sugarcrmsugarcrmMatch1.0

sugarcrmsugarcrmMatch1.0f

sugarcrmsugarcrmMatch1.0g

sugarcrmsugarcrmMatch1.1

sugarcrmsugarcrmMatch1.1a

sugarcrmsugarcrmMatch1.1b

sugarcrmsugarcrmMatch1.1c

sugarcrmsugarcrmMatch1.1d

sugarcrmsugarcrmMatch1.1e

sugarcrmsugarcrmMatch1.1f

sugarcrmsugarcrmMatch1.5d

sugarcrmsugarcrmMatch2.0.1

sugarcrmsugarcrmMatch2.0.1a

sugarcrmsugarcrmMatch2.0.1c

sugarcrmsugarcrmMatch3.0.1

sugarcrmsugarcrmMatch3.5

sugarcrmsugarcrmMatch3.5.1

sugarcrmsugarcrmMatch4.0

sugarcrmsugarcrmMatch4.0.1

sugarcrmsugarcrmMatch4.1

sugarcrmsugarcrmMatch4.2

sugarcrmsugarcrmMatch4.2.1

sugarcrmsugarcrmMatch4.5.0

sugarcrmsugarcrmMatch4.5.0f

sugarcrmsugarcrmMatch4.5.1

sugarcrmsugarcrmMatch4.5.1community_edition

sugarcrmsugarcrmMatch4.5.1i

sugarcrmsugarcrmMatch4.5.1o

sugarcrmsugarcrmMatch5.0.0

sugarcrmsugarcrmMatch5.0.0community_edition

sugarcrmsugarcrmMatch5.0.0sugar_community_edition

sugarcrmsugarcrmMatch5.0.0hsugar_community_edition

sugarcrmsugarcrmMatch5.0.0ksugar_community_edition

sugarcrmsugarcrmMatch5.1.0sugar_community_edition

sugarcrmsugarcrmMatch5.1.0-betasugar_community_edition

sugarcrmsugarcrmMatch5.1csugar_community_edition

sugarcrmsugarcrmMatch5.1l

sugarcrmsugarcrmMatch5.2.0g

sugarcrmsugarcrmMatch5.2a

sugarcrmsugarcrmMatch5.2c

sugarcrmsugarcrmMatch5.2csugar_community_edition

sugarcrmsugarcrmMatch5.2d

sugarcrmsugarcrmMatch5.2dsugar_community_edition

sugarcrmsugarcrmMatch5.2e

sugarcrmsugarcrmMatch5.2esugar_community_edition

sugarcrmsugarcrmMatch5.2f

sugarcrmsugarcrmMatch5.2g

sugarcrmsugarcrmMatch5.2h

sugarcrmsugarcrmMatch5.5beta1

sugarcrmsugarcrmMatch5.5beta2

sugarcrmsugarcrmMatch5.5.0

sugarcrmsugarcrmMatch5.5.1

sugarcrmsugarcrmMatch5.5.2

sugarcrmsugarcrmMatch5.5.3

sugarcrmsugarcrmMatch5.5.4

sugarcrmsugarcrmMatch5.5a

sugarcrmsugarcrmMatch6.0

sugarcrmsugarcrmMatch6.0.1

sugarcrmsugarcrmMatch6.0.2

sugarcrmsugarcrmMatch6.0.3

sugarcrmsugarcrmMatch6.1.0

sugarcrmsugarcrmMatch6.1.1

VendorProductVersionCPE
sugarcrmsugarcrmcpe:/a:sugarcrm:sugarcrm::::
sugarcrmsugarcrm5.0.0cpe:/a:sugarcrm:sugarcrm:5.0.0:::
sugarcrmsugarcrm5.5.4cpe:/a:sugarcrm:sugarcrm:5.5.4:::
sugarcrmsugarcrm6.0.1cpe:/a:sugarcrm:sugarcrm:6.0.1:::
sugarcrmsugarcrm1.1acpe:/a:sugarcrm:sugarcrm:1.1a:::
sugarcrmsugarcrm5.2.0gcpe:/a:sugarcrm:sugarcrm:5.2.0g:::
sugarcrmsugarcrm5.5.0cpe:/a:sugarcrm:sugarcrm:5.5.0:::
sugarcrmsugarcrm1.0gcpe:/a:sugarcrm:sugarcrm:1.0g:::
sugarcrmsugarcrm2.0.1cpe:/a:sugarcrm:sugarcrm:2.0.1:::
sugarcrmsugarcrm6.0.3cpe:/a:sugarcrm:sugarcrm:6.0.3:::

Vendor	Product	Version	CPE
sugarcrm	sugarcrm		cpe:/a:sugarcrm:sugarcrm::::
sugarcrm	sugarcrm	5.0.0	cpe:/a:sugarcrm:sugarcrm:5.0.0:::
sugarcrm	sugarcrm	5.5.4	cpe:/a:sugarcrm:sugarcrm:5.5.4:::
sugarcrm	sugarcrm	6.0.1	cpe:/a:sugarcrm:sugarcrm:6.0.1:::
sugarcrm	sugarcrm	1.1a	cpe:/a:sugarcrm:sugarcrm:1.1a:::
sugarcrm	sugarcrm	5.2.0g	cpe:/a:sugarcrm:sugarcrm:5.2.0g:::
sugarcrm	sugarcrm	5.5.0	cpe:/a:sugarcrm:sugarcrm:5.5.0:::
sugarcrm	sugarcrm	1.0g	cpe:/a:sugarcrm:sugarcrm:1.0g:::
sugarcrm	sugarcrm	2.0.1	cpe:/a:sugarcrm:sugarcrm:2.0.1:::
sugarcrm	sugarcrm	6.0.3	cpe:/a:sugarcrm:sugarcrm:6.0.3:::