CVE-2009-3258

Severity

90%

Complexity

80%

Confidentiality

165%

vtiger CRM before 5.1.0 allows remote authenticated users, with certain View privileges, to delete (1) attachments, (2) reports, (3) filters, (4) views, and (5) tickets; insert (6) attachments, (7) reports, (8) filters, (9) views, and (10) tickets; and edit (11) reports, (12) filters, (13) views, and (14) tickets via unspecified vectors.

CVSS 2.0 Base Score 9. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:S/C:C/I:C/A:C).

Overview

First reported 15 years ago

2009-09-18 21:30:00

Last updated 6 years ago

2018-10-30 16:25:00

Affected Software

Vtiger CRM 1.0

1.0

Vtiger CRM 2.0

2.0

Vtiger CRM 2.0.1

2.0.1

Vtiger CRM 2.1

2.1

Vtiger CRM 3.0

3.0

Vtiger CRM 3.0 beta

3.0

Vtiger CRM 3.2

3.2

Vtiger CRM 4

4

Vtiger CRM 4 beta

4

Vtiger CRM 4 beta Italian

4

Vtiger CRM 4 release candidate 1

4

Vtiger CRM 4.0

4.0

Vtiger CRM 4.0.1

4.0.1

vtiger vtiger CRM 4.2

4.2

vtiger vtiger CRM 4.2.4

4.2.4

Vtiger CRM 5.0.0

5.0.0

vtiger vtiger CRM 5.0.2

5.0.2

Vtiger CRM 5.0.3

5.0.3

Vtiger CRM 5.0.4

5.0.4

Vtiger CRM 5.1.0

5.1.0

Vtiger CRM 5.1.0 release candidate