Mageni Mageni Security LLC

Free and open-source vulnerability scanner

Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.

Install Now

Available for macOS, Windows, and Linux

App screenshot

CVE-2011-0745

CVE information

Published

12 years ago

Last Modified

4 years ago

CVSSv2.0 Severity

Medium

Impact Analysis

Share

Description

SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover (1) the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or (2) the names of contact persons via a ShowDuplicates action to the Contacts module, reachable through index.php..

CVSSv2.0 Score

Severity
Medium
Base Score
4/10
Exploit Score
8/10
Access Vector
Network
Access Complexity
Low
Authentication Required
Single
Impact Score
2.9/10
Confidentiality Impact
Partial
Availability Impact
None
Integrity Impact
None

Products Affected

CPE Affected Vulnerable Excluding Edit
cpe:2.3:a:sugarcrm:sugarcrm:5.5.2:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:1.5d:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.0.0:*:sugar_community_edition:
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:4.2.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.5.4:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:4.5.0f:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:1.1a:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:4.0:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.2g:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.1c:*:sugar_community_edition:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.2d:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:3.5.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:1.1b:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:4.0.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.1.0:*:sugar_community_edition:
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.5:beta2:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:4.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:1.0g:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:6.1.0:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.5.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:6.0:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:4.5.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:4.5.0:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:6.1.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.0.0:*:community_edition:*:*:*:
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:6.0.2:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.0.0:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.2a:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:2.0.1c:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.2d:*:sugar_community_edition:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:*:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.1.0-beta:*:sugar_community_edi
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:4.5.1i:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:1.1e:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:2.0.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.2f:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:3.5:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.2c:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:1.1c:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:6.0.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:1.1f:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.1l:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:1.0:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.2e:*:sugar_community_edition:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.2h:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:2.0.1a:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.5a:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.2c:*:sugar_community_edition:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:1.1d:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:3.0.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.2.0g:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:1.0f:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:6.0.3:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.0.0k:*:sugar_community_edition
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.2e:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:4.5.1:*:community_edition:*:*:*:
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:4.5.1o:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.5.0:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.0.0h:*:sugar_community_edition
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.5:beta1:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:1.1:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:4.2:*:*:*:*:*:*:*
  Yes
- -
cpe:2.3:a:sugarcrm:sugarcrm:5.5.3:*:*:*:*:*:*:*
  Yes
- -

References