Unrated severityNVD Advisory· Published Jul 6, 2007· Updated Jun 16, 2026

CVE-2007-3604

Description

vtiger CRM before 5.0.3 allows remote authenticated users with access to the Analytics DashBoard menu to bypass data restrictions and read the pipeline of the entire organization, possibly involving modules/Potentials/Potentials.php.

Affected products

Vtiger/Vtigercrm
cpe:2.3:a:vtiger:vtiger_crm:*:*:*:*:*:*:*:*
Range: <=5.0.2
Vtiger/vTigerllm-fuzzy
Range: <5.0.3

Patches

Vulnerability mechanics

References

trac.vtiger.com/cgi-bin/trac.cgi/changeset/10423nvdPatch
forums.vtiger.com/viewtopic.phpnvd
osvdb.org/45783nvd
trac.vtiger.com/cgi-bin/trac.cgi/report/9nvd
trac.vtiger.com/cgi-bin/trac.cgi/ticket/3196nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000