Info

Disclosure

Aug 30, 2012

Discovery

Unknown

Dates

Exploit

Aug 30, 2012

Solution

Aug 24, 2012

Description

SugarCRM contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when ical_server.php has an open key, which will disclose schedule information to a remote attacker.

Classification

Location: Remote / Network Access
Attack Type: Information Disclosure
Impact: Loss of Confidentiality
Solution: Solution Unknown
Exploit: Exploit Public
Disclosure: Vendor Verified, Third-party Verified, Coordinated Disclosure
OSVDB: Web Related

Solution

OSVDB is not aware of a solution for this vulnerability.

Products

SugarCRM Inc.

SugarCRM

6.5.2

References

Exploit Database: 20981
Secunia Advisory ID: 50388
Related OSVDB ID: 85068 85078 85079 85080 85111 85112
Other Advisory URL: http://itsecuritysolutions.org/2012-08-30-SugarCRM-Community-Edition-6.5.2-multiple-vulnerabilities/
Vendor URL: http://www.sugarcrm.com/company-overview

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/85081