CVE-2007-3602

The SOAP webservice in vtiger CRM before 5.0.3 does not ensure that authenticated accounts are active, which allows remote authenticated users with inactive…

published July 6, 2007

CVSS
—
EPSS
1%
Percentile
73.7
In the wild
Unconfirmed
What it is

The SOAP webservice in vtiger CRM before 5.0.3 does not ensure that authenticated accounts are active, which allows remote authenticated users with inactive accounts to access and modify data, as demonstrated by the Thunderbird plugin.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01490 · 73.7th percentile
Published
2007-07-06T19:00Z
EPSS history
Timeline
  • 06 JUL 19:00Z
    The SOAP webservice in vtiger CRM before 5.0.3 does not ensure that authenticated accounts are active, which allows remote authenticated users with inactive…
    cvelistv5