Salesboom.com Says SugarCRM Goes Sour with Major Security Flaw Exposing Customer Data
1 January 1970Salesboom.com (http://www.salesboom.com), industry-leading provider of hosted CRM, SFA, ERP and CLM solutions, today revealed a security exploit present in the SugarCRM open source hosted CRM software product. The security exploit present in the flawed open source software exposes sometimes sensitive customer data to anyone with access to an Internet connection, and requires absolutely no login authentication to display the information. While Salesboom will not be exposing this exploit to the general public to protect SugarCRM customers' data integrity, it acknowledges that this type of security hole is even more dangerous in an open source software environment, as there could be developers in the community who already have taken note of the exploit and plan to use it maliciously.
"The security exploit present exposes sometimes sensitive customer data to anyone with access to an Internet connection, and requires absolutely no login authentication to display the information," said Rod Gillis, a developer with Salesboom.com.
"Many hosted CRM buyers were concerned about the potential security issues in both a hosted CRM and an open-source environment to begin with," commented Rami Hamodah, Salesboom President and Co-Founder. "This just confirms that their suspicions were correct. I'm not going to reveal what the security exploit is to the general public for obvious reasons, but we will be trying to work with SugarCRM directly to get this cleared up for their customers as soon as possible. We've had customers migrate from the open source SugarCRM over to Salesboom in the past because of security concerns, and I'm sure we'll continue well after this exploit is addressed. Businesses want a secure, reliable product, and that's what they deserve. Salesboom delivers that."
The security hole allows any unauthenticated user with basic levels of technology expertise to access any number of critical data within the SugarCRM system, including sales information and customer information amongst others. This data is easily accessible to anyone, whether or not they are logged into the SugarCRM system.
For more information on the Salesboom.com suite of hosted CRM software solutions, interested parties are asked to contact the Salesboom sales department at sales@salesboom.com or toll free at 1.877.CRM.SALE. More information is available at http://www.salesboom.com.
Source: Business Wire
All trademarks and copyrighted information contained herein are the property of their respective owners.
Related Articles
|
