Improper Access Control in salesagility/suitecrm
CVE-2023-5353
8.1HIGH
Summary
An improper access control vulnerability has been identified in SuiteCRM developed by SalesAgility. This flaw exists in versions prior to 7.14.1 and allows unauthorized access to sensitive functionalities within the application. Attackers could exploit this weakness to gain access to restricted areas, compromising data integrity and security. It is crucial for users to update to the latest version to mitigate potential risks associated with this vulnerability.
Affected Version(s)
salesagility/suitecrm < 7.14.1
References
CVSS V3.1
Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved