CVE-2019-19017

Опубликовано: 02 дек. 2019

Источник: nvd

CVSS3: 8.1

CVSS2: 9.3

EPSS Низкий

Описание

An issue was discovered in TitanHQ WebTitan before 5.18. The appliance has a hard-coded root password set during installation. An attacker could utilize this to gain root privileges on the system.

Ссылки

https://write-up.github.io/webtitan/
Exploit
Third Party Advisory
https://www.webtitan.com/resources/product-updates/
Release Notes
Vendor Advisory
https://write-up.github.io/webtitan/
Exploit
Third Party Advisory
https://www.webtitan.com/resources/product-updates/
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:titanhq:webtitan:*:*:*:*:*:*:*:*

Версия до 5.18 (исключая)

EPSS

Процентиль: 61%

0.00413

Низкий

8.1 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-362

Связанные уязвимости

GHSA-xcj9-hh7g-p7rq

github

больше 3 лет назад