CVE-2019-11899 in Access Professional Edition

Riassunto

di MITRE

An unauthenticated attacker can achieve unauthorized access to sensitive data by exploiting Windows SMB protocol on a client installation. With Bosch Access Professional Edition (APE) 3.8, client installations need to be authorized by the APE administrator.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Responsabile: Robert Bosch GmbH
• Prenotare: 13/05/2019
• Moderazione: accettato
• Voce: VDB-141713
• CPE: pronto
• CWE: CWE-200 (confermato)
• CVSS: 7.5 (NVD)
• EPSS: 0.01122
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-11899
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-11899
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-11899/