exploitDog

CVE-2019-19550

Опубликовано: 31 янв. 2020

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL.

Ссылки

https://github.com/underprotection/CVE-2019-19550/
Exploit
Third Party Advisory
https://github.com/underprotection/CVE-2019-19550/
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:senior:rubiweb:6.2.34.28:*:*:*:*:*:*:*

cpe:2.3:a:senior:rubiweb:6.2.34.37:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00536

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-vvm8-99wh-49g6

github

больше 3 лет назад

Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL.

EPSS

Процентиль: 67%

0.00536

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

CWE-200