CVEvulnerability

CVE-2007-3616

6.5 MEDIUM Published 2007-07-06 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2007-07-06
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P

Description

index.php in vtiger CRM before 5.0.3 allows remote authenticated users to perform administrative changes to arbitrary profile settings via a certain profilePrivileges action in the Users module.

Affected configurations

• vtiger vtiger crm (<= 5.0.2)

References

http://trac.vtiger.com/cgi-bin/trac.cgi/report/9 Patch
http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/2237 trac.vtiger.com
http://trac.vtiger.com/cgi-bin/trac.cgi/report/9 Patch
http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/2237 trac.vtiger.com