VDB-139529 · CVE-2019-25069 · VulDB 139529

Axios Italia Axios RE 1.7.0/7.0.0 Error Message ASP.NET information disclosure

A vulnerability, which was classified as problematic, has been found in Axios Italia Axios RE 1.7.0/7.0.0. This issue affects some unknown processing of the component Error Message Handler. The manipulation leads to information disclosure (ASP.NET). The CWE definition for the vulnerability is CWE-200. The weakness was shared 08/06/2019 by ErPaciocco as VulDB 139529 as Entry (VulDB). The advisory is shared at vuldb.com. The identification of this vulnerability is CVE-2019-25069. The attack may be initiated remotely. There are no technical details available. Furthermore, there is an exploit available. The price for an exploit might be around USD $0-$5k at the moment. MITRE ATT&CK project uses the attack technique T1592 for this issue. It is declared as proof-of-concept. We expect the 0-day to have been worth approximately $0-$5k. A possible mitigation has been published before and not just after the disclosure of the vulnerability.

Timeline

The analysis of the timeline helps to identify the required approach and handling of single vulnerabilities and vulnerability collections. This overview makes it possible to see less important slices and more severe hotspots at a glance. Initiating immediate vulnerability response and prioritizing of issues is possible.

User

1	58

Field

vulnerability_cvss3_meta_tempscore	2
vulnerability_cvss3_meta_basescore	2
exploit_price_0day	2
vulnerability_cvss3_cna_basescore	1
vulnerability_cvss3_nvd_basescore	1

Commit Conf

100%	37
70%	25
90%	13
98%	1

Approve Conf

100%	37
70%	25
90%	13
98%	1

ID	Commited	User	Field	Change	Remarks	Accepted	Status	C
15094048	11/21/2023	VulD...	cvss3_cna_basescore	5.3	see CVSS documentation	11/21/2023	accepted	90
15094047	11/21/2023	VulD...	cvss3_nvd_basescore	7.5	nist.gov	11/21/2023	accepted	90
15094046	11/21/2023	VulD...	cvss2_nvd_basescore	5.0	nist.gov	11/21/2023	accepted	90
15094045	11/21/2023	VulD...	cvss3_meta_tempscore	5.8	see CVSS documentation	11/21/2023	accepted	90
15094044	11/21/2023	VulD...	cvss3_meta_basescore	6.0	see CVSS documentation	11/21/2023	accepted	90
15094043	11/21/2023	VulD...	cve_cna	VulDB	nvd.nist.gov	11/21/2023	accepted	70
15094042	11/21/2023	VulD...	cvss3_cna_a	N	nvd.nist.gov	11/21/2023	accepted	70
15094041	11/21/2023	VulD...	cvss3_cna_i	N	nvd.nist.gov	11/21/2023	accepted	70
15094040	11/21/2023	VulD...	cvss3_cna_c	L	nvd.nist.gov	11/21/2023	accepted	70
15094039	11/21/2023	VulD...	cvss3_cna_s	U	nvd.nist.gov	11/21/2023	accepted	70
15094038	11/21/2023	VulD...	cvss3_cna_ui	N	nvd.nist.gov	11/21/2023	accepted	70
15094037	11/21/2023	VulD...	cvss3_cna_pr	N	nvd.nist.gov	11/21/2023	accepted	70
15094036	11/21/2023	VulD...	cvss3_cna_ac	L	nvd.nist.gov	11/21/2023	accepted	70
15094035	11/21/2023	VulD...	cvss3_cna_av	N	nvd.nist.gov	11/21/2023	accepted	70
15094034	11/21/2023	VulD...	cvss2_nvd_ai	N	nvd.nist.gov	11/21/2023	accepted	70
15094033	11/21/2023	VulD...	cvss2_nvd_ii	N	nvd.nist.gov	11/21/2023	accepted	70
15094032	11/21/2023	VulD...	cvss2_nvd_ci	P	nvd.nist.gov	11/21/2023	accepted	70
15094031	11/21/2023	VulD...	cvss2_nvd_au	N	nvd.nist.gov	11/21/2023	accepted	70
15094030	11/21/2023	VulD...	cvss2_nvd_ac	L	nvd.nist.gov	11/21/2023	accepted	70
15094029	11/21/2023	VulD...	cvss2_nvd_av	N	nvd.nist.gov	11/21/2023	accepted	70