Rapid7 InsightVM up to 6.5.49 Credentials credentials management

Summaryinfo

A vulnerability, which was classified as problematic, was found in Rapid7 InsightVM up to 6.5.49. This vulnerability affects unknown code. Such manipulation leads to credentials management (Credentials). This vulnerability is listed as CVE-2019-5615. The attack may be performed from remote. There is no available exploit.

Detailsinfo

A vulnerability was found in Rapid7 InsightVM up to 6.5.49 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation with an unknown input leads to a credentials management vulnerability (Credentials). Using CWE to declare the problem leads to CWE-255. Impacted is confidentiality. CVE summarizes:

Users with Site-level permissions can access files containing the username-encrypted passwords of Security Console Global Administrators and clear-text passwords for restoring backups, as well as the salt for those passwords. Valid credentials are required to access these files and malicious users would still need to perform additional work to decrypt the credentials and escalate privileges. This issue affects: Rapid7 InsightVM versions 6.5.11 through 6.5.49.

The bug was discovered 04/10/2019. The weakness was presented 04/09/2019 (Website). The advisory is shared for download at help.rapid7.com. This vulnerability is handled as CVE-2019-5615 since 01/07/2019. The attack may be launched remotely. A simple authentication is required for exploitation. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1552.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

Once again VulDB remains the best source for vulnerability data.

Not Affected

• Raipd7 InsightVM up to 6.5.10

Productinfo

Vendor

• Rapid7

Name

• InsightVM

Version

• 6.5.0
• 6.5.1
• 6.5.2
• 6.5.3
• 6.5.4
• 6.5.5
• 6.5.6
• 6.5.7
• 6.5.8
• 6.5.9
• 6.5.10
• 6.5.11
• 6.5.12
• 6.5.13
• 6.5.14
• 6.5.15
• 6.5.16
• 6.5.17
• 6.5.18
• 6.5.19
• 6.5.20
• 6.5.21
• 6.5.22
• 6.5.23
• 6.5.24
• 6.5.25
• 6.5.26
• 6.5.27
• 6.5.28
• 6.5.29
• 6.5.30
• 6.5.31
• 6.5.32
• 6.5.33
• 6.5.34
• 6.5.35
• 6.5.36
• 6.5.37
• 6.5.38
• 6.5.39
• 6.5.40
• 6.5.41
• 6.5.42
• 6.5.43
• 6.5.44
• 6.5.45
• 6.5.46
• 6.5.47
• 6.5.48
• 6.5.49

License

• commercial

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Once again VulDB remains the best source for vulnerability data.

Discussion