CVE-2019-18785: High severity suitecrm vulnerability
Published Mar 20, 2020
·Updated
SuiteCRM 7.10.x prior to 7.10.21 and 7.11.x prior to 7.11.9 mishandles API access tokens and credentials.
Affected Software
2 affected components
SuiteCRM SuiteCRM>=7.10.0<7.10.21
SuiteCRM SuiteCRM>=7.11.0<7.11.9
Event History
Mar 20, 2020
CVE Published
via MITRE·12:31 AM
Data Sourced
via MITRE·12:31 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2019-18785?
The severity of CVE-2019-18785 is considered medium due to improper handling of API access tokens.
2
How do I fix CVE-2019-18785?
To fix CVE-2019-18785, you need to upgrade SuiteCRM to version 7.10.21 or 7.11.9 or later.
3
Which versions of SuiteCRM are affected by CVE-2019-18785?
CVE-2019-18785 affects SuiteCRM versions prior to 7.10.21 and 7.11.9.
4
What type of vulnerability is CVE-2019-18785?
CVE-2019-18785 is an API access token and credential mishandling vulnerability.
5
Can CVE-2019-18785 lead to unauthorized access?
Yes, CVE-2019-18785 can potentially allow unauthorized access to sensitive API endpoints.