CVE-2009-3257

vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the (1) Account Billing Address and (2) Shipping Address fields in a…

published September 18, 2009

CVSS
—
EPSS
1%
Percentile
58.2
In the wild
Unconfirmed
What it is

vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the (1) Account Billing Address and (2) Shipping Address fields in a profile by creating a Sales Order (SO) associated with that profile.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00864 · 58.2th percentile
Published
2009-09-18T21:00Z
EPSS history
Timeline
  • 18 SEP 21:00Z
    vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the (1) Account Billing Address and (2) Shipping Address fields in a…
    cvelistv5