CVE-2013-3215

vtiger CRM 5.4.0 and earlier contain an Authentication Bypass Vulnerability due to improper authentication validation in the validateSession function.

• CWE-287

• https://www.securityfocus.com/bid/61559Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86163Third Party Advisory, VDB Entry
• https://www.securityfocus.com/bid/61559Third Party Advisory, VDB Entry
• https://exchange.xforce.ibmcloud.com/vulnerabilities/86163Third Party Advisory, VDB Entry

Published

Jan 29, 2020

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-3209Microsoft Internet Explorer 9 and 10 allows remote attackers…
• CVE-2013-3210Opera before 12.15 does not properly block top-level domains…
• CVE-2013-3211Unspecified vulnerability in Opera before 12.15 has unknown …
• CVE-2013-3212vtiger CRM 5.4.0 and earlier contain local file-include vuln…8.1
• CVE-2013-3213Multiple SQL injection vulnerabilities in vTiger CRM 5.0.0 t…
• CVE-2013-3214vtiger CRM 5.4.0 and earlier contain a PHP Code Injection Vu…9.8
• CVE-2013-3219bitcoind and Bitcoin-Qt 0.8.x before 0.8.1 do not enforce a …
• CVE-2013-3220bitcoind and Bitcoin-Qt before 0.4.9rc2, 0.5.x before 0.5.8r…
• CVE-2013-3221The Active Record component in Ruby on Rails 2.3.x, 3.0.x, 3…
• CVE-2013-3222The vcc_recvmsg function in net/atm/common.c in the Linux ke…
• CVE-2013-3223The ax25_recvmsg function in net/ax25/af_ax25.c in the Linux…
• CVE-2013-3224The bt_sock_recvmsg function in net/bluetooth/af_bluetooth.c…