exploitDog

CVE-2019-15719

Опубликовано: 09 окт. 2019

Источник: nvd

CVSS3: 8

CVSS2: 5.2

EPSS Низкий

Описание

Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a message directly to pbs_mom, which fails to properly authenticate the message. This results in code execution as an arbitrary user.

Ссылки

http://packetstormsecurity.com/files/154782/PBS-Professional-19.2.3-Authentication-Bypass.html
Exploit
Third Party Advisory
VDB Entry
https://www.hpcsec.com
Third Party Advisory
https://www.hpcsec.com/2019/10/08/cve-2019-15719/
Exploit
Third Party Advisory
https://www.pbspro.org/
Product
http://packetstormsecurity.com/files/154782/PBS-Professional-19.2.3-Authentication-Bypass.html
Exploit
Third Party Advisory
VDB Entry
https://www.hpcsec.com
Third Party Advisory
https://www.hpcsec.com/2019/10/08/cve-2019-15719/
Exploit
Third Party Advisory
https://www.pbspro.org/
Product

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:altair:pbs_professional:*:*:*:*:*:*:*:*

Версия от 13.0.0 (включая) до 13.0.412 (исключая)

cpe:2.3:a:altair:pbs_professional:*:*:*:*:*:*:*:*

Версия от 14.0.0 (включая) до 14.2.7 (исключая)

cpe:2.3:a:altair:pbs_professional:*:*:*:*:*:*:*:*

Версия от 18.0.0 (включая) до 18.2.5 (исключая)

cpe:2.3:a:altair:pbs_professional:*:*:*:*:*:*:*:*

Версия от 19.1.0 (включая) до 19.1.3 (исключая)

cpe:2.3:a:altair:pbs_professional:*:*:*:*:*:*:*:*

Версия от 19.2.0 (включая) до 19.2.4 (исключая)

EPSS

Процентиль: 80%

0.01324

Низкий

8 High

CVSS3

5.2 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-hr4v-jcmg-42h2

CVSS3: 8

github

больше 3 лет назад

Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a message directly to pbs_mom, which fails to properly authenticate the message. This results in code execution as an arbitrary user.

EPSS

Процентиль: 80%

0.01324

Низкий

8 High

CVSS3

5.2 Medium

CVSS2

Дефекты

NVD-CWE-noinfo