Lucene search
GoogleOSV:CVE-2024-45392HistorySep 05, 2024 - 5:15 p.m.
CVE-2024-45392
2024-09-0517:15:12
Google
osv.dev
2
suitecrm open-source crm
access control
vulnerability
patched
CVSS3
7.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
AI Score
6.8
Confidence
High
SuiteCRM is an open-source customer relationship management (CRM) system. Prior to version 7.14.5 and 8.6.2, insufficient access control checks allow a threat actor to delete records via the API. Versions 7.14.5 and 8.6.2 contain a patch for the issue.
Related
cvelist
cvelist
cve
cve
CVE-2024-45392
2024-09-05 17:15:12
vulnrichment
vulnrichment
osv
osv
BIT-suitecrm-2024-45392
2024-09-07 07:24:03
nvd
nvd
CVE-2024-45392
2024-09-05 17:15:12
CVSS3
7.7
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
AI Score
6.8
Confidence
High
Related for OSV:CVE-2024-45392