CVE-2009-3257 - vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the (1) Account Billing Address and (2) Shipping Address fields in a profile by creating a Sales Order (SO) associated with that profile

Back Back to CVE browser

LOW

vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the (1) Account Billing Address and (2) Shipping Address fields in a profile by creating a Sales Order (SO) associated with that profile

Published Sep 18, 2009

3.6

LOW

CVSS 2.0

EPSS 0.86%

Description

vtiger CRM before 5.1.0 allows remote authenticated users to bypass the permissions on the (1) Account Billing Address and (2) Shipping Address fields in a profile by creating a Sales Order (SO) associated with that profile.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-264

References (2)

http://secunia.com/advisories/36309
third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5055
x_refsource_CONFIRMExploitVendor Advisory

Link	Providers	Tags
http://secunia.com/advisories/36309		third-party-advisoryx_refsource_SECUNIAThird Party Advisory
http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/5055		x_refsource_CONFIRMExploitVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Sep 18, 2009

Updated Sep 16, 2024

Reserved Sep 18, 2009

Link CVE-2009-3257

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-3257

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-3257