BID:11063

SugarCRM Unspecified Login Authentication Vulnerability

Info

SugarCRM Unspecified Login Authentication Vulnerability

Bugtraq ID:	11063
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Aug 26 2004 12:00AM
Updated:	Aug 26 2004 12:00AM
Credit:	This issue was disclosed by the vendor.
Vulnerable:	SugarCRM SugarCRM 1.1 e SugarCRM SugarCRM 1.1 d SugarCRM SugarCRM 1.1 c SugarCRM SugarCRM 1.1 b SugarCRM SugarCRM 1.1 a SugarCRM SugarCRM 1.1 SugarCRM SugarCRM 1.0 g SugarCRM SugarCRM 1.0 f SugarCRM SugarCRM 1.0

Not Vulnerable:	SugarCRM SugarCRM 1.1 f

Discussion

SugarCRM Unspecified Login Authentication Vulnerability

SugarCRM is reported prone to an unspecified vulnerability. The impact and cause of this issue is currently unknown. The vulnerability was reported to exist in the login authentication functionality of the application.

SugarCRM versions 1.1e and prior are affected by this issue.

Exploit / POC

SugarCRM Unspecified Login Authentication Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Solution / Fix

SugarCRM Unspecified Login Authentication Vulnerability

Solution:
The vendor has released SugarCRM 1.1f to address this issue.

SugarCRM SugarCRM 1.0