4 matches found
SuiteCRM 安全漏洞
SuiteCRM is a customer relationship management system from the SuiteCRM Suitecrm team. A security vulnerability in SuiteCRM 7.10.x prior to 7.10.33 and 7.11.x prior to 7.11.22 exists that allows an attacker to perform elevation of privilege...
PT-2021-23439 · Suitecrm · Suitecrm
Name of the Vulnerable Software and Affected Versions: SuiteCRM versions 7.10.x through 7.10.32 SuiteCRM versions 7.11.x through 7.11.21 Description: The issue allows for privilege escalation. Recommendations: For SuiteCRM versions 7.10.x through 7.10.32, update to version 7.10.33 or later. For...
CVE-2020-7021
Elasticsearch versions before 7.10.0 and 6.8.14 have an information disclosure issue when audit logging and the emitrequestbody option is enabled. The Elasticsearch audit log could contain sensitive information such as password hashes or authentication tokens. This could allow an Elasticsearch...
