Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Vulnerabilities / Threats

8/6/2018
12:50 PM
50%
50%

Salesforce Customer Data Possibly Exposed in API Glitch

The issue was discovered and fixed on July 18.

Salesforce said in a post last week that it had alerted customers to a data leak caused by an API error.

According to Salesforce, during an update to its Marketing Cloud service that was rolled out between June 4 and July 7, 2018, a code change produced an API glitch that "may have caused a small subset of REST API calls to improperly retrieve or write data from one customer's account to another."

The company's security team discovered the problem on July 18, and at that time corrected the error. "We have no evidence of malicious behavior associated with this issue," Salesforce said.

Read more here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio
 

Recommended Reading:

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
agwarej80@gmail.com
100%
0%
[email protected],
User Rank: Strategist
8/7/2020 | 6:29:07 AM
Compliments
Excellent blog, I really love the way everything is linked up and built. I am still grasping everything about blogging and i would love for you to give me some tips. Before I forget, the information you provided couldn't be presented in a better way. I see a lot of bloggers just blogging for the money, but you are different which makes you special. I have bookmarked your website and would be visiting daily. You can reach me on mail at [email protected] I really do hope you read <a href="https://www.makeoverarena.com/zamob-games-music-videos-tv-series-www-zamob-co-za/">zamob</a>, <a href="https://www.tecreals.com/phoneky/">phoneky</a>,<a href="https://www.makeoverarena.com/mp3goo-free-music-download-mp3goo-search-mp3goo-free-mp3-download-and-listen-online/"> mp3goo</a> or <a href="https://www.tecreals.com/fzmovies/">fzmovies</a> on my website and tell me what you think. If those links don't work, follow these >>>

https://www.tecreals.com/fzmovies/
https://www.makeoverarena.com/zamob-games-music-videos-tv-series-www-zamob-co-za/
More SolarWinds Attack Details Emerge
Kelly Jackson Higgins, Executive Editor at Dark Reading,  1/12/2021
Vulnerability Management Has a Data Problem
Tal Morgenstern, Co-Founder & Chief Product Officer, Vulcan Cyber,  1/14/2021
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
2020: The Year in Security
Download this Tech Digest for a look at the biggest security stories that - so far - have shaped a very strange and stressful year.
Flash Poll
Assessing Cybersecurity Risk in Today's Enterprises
Assessing Cybersecurity Risk in Today's Enterprises
COVID-19 has created a new IT paradigm in the enterprise -- and a new level of cybersecurity risk. This report offers a look at how enterprises are assessing and managing cyber-risk under the new normal.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2020-35128
PUBLISHED: 2021-01-19
Mautic before 3.2.4 is affected by stored XSS. An attacker with permission to manage companies, an application feature, could attack other users, including administrators. For example, by loading an externally crafted JavaScript file, an attacker could eventually perform actions as the target user. ...
CVE-2020-35129
PUBLISHED: 2021-01-19
Mautic before 3.2.4 is affected by stored XSS. An attacker with access to Social Monitoring, an application feature, could attack other users, including administrators. For example, an attacker could load an externally drafted JavaScript file that would allow them to eventually perform actions on th...
CVE-2020-23342
PUBLISHED: 2021-01-19
A CSRF vulnerability exists in Anchor CMS 0.12.7 anchor/views/users/edit.php that can change the Delete admin users.
CVE-2020-20950
PUBLISHED: 2021-01-19
Bleichenbacher's attack on PKCS #1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 2018-11-26. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable li...
CVE-2020-23522
PUBLISHED: 2021-01-19
Pixelimity 1.0 has cross-site request forgery via the admin/setting.php data [Password] parameter.