CVE-2019-15011 in Application Links

Résumé

par MITRE

The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 before version 5.3.7, from version 5.4.0 before 5.4.13, and from version 6.0.0 before 6.0.5 disclosed application link information to non-admin users via a missing permissions check.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Réserver: 13/08/2019
• Modérer: accepté
• Entrée: VDB-147277
• CPE: prêt
• CWE: CWE-276 (confirmé)
• CVSS: 4.3 (NVD)
• EPSS: 0.00915
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-15011
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-15011
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-15011/