CVE-2022-45186: High severity suitecrm vulnerability
Published Jan 7, 2025
·Updated
An issue was discovered in SuiteCRM 7.12.7. Authenticated users can recover an arbitrary field of a database.
Affected Software
2 affected components
SuiteCRM SuiteCRM
SalesAgility SuiteCRM=7.12.7
Event History
Jan 7, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-45186?
CVE-2022-45186 has been classified as a medium severity vulnerability because it allows authenticated users to recover arbitrary database fields.
2
How do I fix CVE-2022-45186?
To fix CVE-2022-45186, upgrade SuiteCRM to version 7.12.8 or later, which addresses this vulnerability.
3
Who is affected by CVE-2022-45186?
CVE-2022-45186 affects users of SuiteCRM version 7.12.7 and earlier who have authenticated access.
4
What kind of exploitation is possible with CVE-2022-45186?
CVE-2022-45186 allows authenticated users to access and recover arbitrary fields from the database.
5
Is CVE-2022-45186 a remote or local vulnerability?
CVE-2022-45186 is a local vulnerability since it requires authenticated access to exploit.