Secunia
Login
|
|
CVE Reference: CVE-2008-3458 |
|
| NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE. | |
|
Original Page at CVE MITRE: CVE-2008-3458 |
|
|
Description: Vtiger CRM before 5.0.4 stores sensitive information under the web root with insufficient access control, which allows remote attackers to read mail merge templates via a direct request to the wordtemplatedownload directory. |
|
|
CVE Status: Candidate |
|
|
References: SAID Secunia Advisory: SA28370 OSVDB 40218 MISC http://trac.vtiger.com/cgi-bin/trac.cgi/changeset/11811 CONFIRM http://sourceforge.net/project/shownotes.php?release_id=567189 http://trac.vtiger.com/cgi-bin/trac.cgi/ticket/2107 http://wiki.vtiger.com/index.php/Vtiger_CRM_5.0.4_-_Release_Notes BID 27228 |
|
| Return to the previous page. |
