2007-07-06 19:00:00
mitre
PUBLISHED
The report module in vtiger CRM before 5.0.3 does not properly apply security rules, which allows remote authenticated users to read arbitrary private module entries.