Lucene search
PRIOn knowledge basePRION:CVE-2007-3602HistoryJul 06, 2007 - 7:30 p.m.
Code injection
2007-07-0619:30:00
PRIOn knowledge base
www.prio-n.com
2
6.8 Medium
AI Score
Confidence
Low
5.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
51.4%
The SOAP webservice in vtiger CRM before 5.0.3 does not ensure that authenticated accounts are active, which allows remote authenticated users with inactive accounts to access and modify data, as demonstrated by the Thunderbird plugin.
| CPE | Name | Operator | Version |
|---|---|---|---|
| vtiger_crm | le | 5.0.2 |
Related
cvelist
cvelist
CVE-2007-3602
2022-10-03 16:14:22
cve
cve
CVE-2007-3602
2022-10-03 16:14:22
nvd
nvd
CVE-2007-3602
2007-07-06 19:30:00
6.8 Medium
AI Score
Confidence
Low
5.5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:P/A:N
0.002 Low
EPSS
Percentile
51.4%
Related for PRION:CVE-2007-3602