CVE-2019-15011 in Application Links

Tóm tắt

Bởi MITRE

The ListEntityLinksServlet resource in Application Links before version 5.0.12, from version 5.1.0 before version 5.2.11, from version 5.3.0 before version 5.3.7, from version 5.4.0 before 5.4.13, and from version 6.0.0 before 6.0.5 disclosed application link information to non-admin users via a missing permissions check.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Đặt trước: 13/08/2019
• Kiểm duyệt: được chấp nhận
• mục: VDB-147277
• CPE: sẵn sàng
• CWE: CWE-276 (Đã xác nhận)
• CVSS: 4.3 (NVD)
• EPSS: 0.00915
• KEV: không
• Các hoạt động: rất thấp

Nguồn

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-15011
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-15011
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-15011/