Логотип exploitDog
bind:CVE-2007-3602
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2007-3602

Количество 2

Количество 2

nvd логотип

CVE-2007-3602

больше 18 лет назад

The SOAP webservice in vtiger CRM before 5.0.3 does not ensure that authenticated accounts are active, which allows remote authenticated users with inactive accounts to access and modify data, as demonstrated by the Thunderbird plugin.

CVSS2: 5.5
EPSS: Низкий
github логотип

GHSA-vvcr-q3cj-chhj

почти 4 года назад

The SOAP webservice in vtiger CRM before 5.0.3 does not ensure that authenticated accounts are active, which allows remote authenticated users with inactive accounts to access and modify data, as demonstrated by the Thunderbird plugin.

EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2007-3602

The SOAP webservice in vtiger CRM before 5.0.3 does not ensure that authenticated accounts are active, which allows remote authenticated users with inactive accounts to access and modify data, as demonstrated by the Thunderbird plugin.

CVSS2: 5.5
0%
Низкий
больше 18 лет назад
github логотип
GHSA-vvcr-q3cj-chhj

The SOAP webservice in vtiger CRM before 5.0.3 does not ensure that authenticated accounts are active, which allows remote authenticated users with inactive accounts to access and modify data, as demonstrated by the Thunderbird plugin.

0%
Низкий
почти 4 года назад

Уязвимостей на страницу