deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2018-20352
Published: 2019-06-10
Description: Use-after-free vulnerability in the mg_cgi_ev_handler function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
CVSS Score: 8.8 (HIGH)
CWE: CWE-416
References: https://github.com/insi2304/mongoose-6.13-fuzz; https://github.com/insi2304/mongoose-6.13-fuzz
CVE: CVE-2018-20353
Published: 2019-06-10
Description: An invalid read of 8 bytes due to a use-after-free vulnerability during a "NULL test" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://github.com/insi2304/mongoose-6.13-fuzz/blob/master/Simplest_Web_Server_Use_After_Free-read-mg_http_get_proto_data5932.png; https://github.com/insi2304/mongoose-6.13-fuzz/blob/master/Simplest_Web_Server_Use_After_Free-read-mg_http_get_proto_data5932.png
CVE: CVE-2018-20354
Published: 2019-06-10
Description: An invalid read of 8 bytes due to a use-after-free vulnerability during a "return" in the mg_http_get_proto_data function in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://github.com/insi2304/mongoose-6.13-fuzz/blob/master/Simplest_Web_Server_Use_After_Free-read-mg_http_get_proto_data.png; https://github.com/insi2304/mongoose-6.13-fuzz/blob/master/Simplest_Web_Server_Use_After_Free-read-mg_http_get_proto_data.png
CVE: CVE-2018-20355
Published: 2019-06-10
Description: An invalid write of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://github.com/insi2304/mongoose-6.13-fuzz/blob/master/Simplest_Web_Server_Use_After_Free-mg_http_free_proto_data_cgi.png; https://github.com/insi2304/mongoose-6.13-fuzz/blob/master/Simplest_Web_Server_Use_After_Free-mg_http_free_proto_data_cgi.png
CVE: CVE-2018-20356
Published: 2019-06-10
Description: An invalid read of 8 bytes due to a use-after-free vulnerability in the mg_http_free_proto_data_cgi function call in mongoose.c in Cesanta Mongoose Embedded Web Server Library 6.13 and earlier allows a denial of service (application crash) or remote code execution.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-416
References: https://github.com/insi2304/mongoose-6.13-fuzz/blob/master/Simplest_Web_Server_Use_After_Free-read_mg_http_free_proto_data_cgi.png; https://github.com/insi2304/mongoose-6.13-fuzz/blob/master/Simplest_Web_Server_Use_After_Free-read_mg_http_free_proto_data_cgi.png
CVE: CVE-2019-11877
Published: 2019-06-10
Description: XSS on the PIX-Link Repeater/Router LV-WR09 with firmware v28K.MiniRouter.20180616 allows attackers to steal credentials without being connected to the network. The attack vector is a crafted ESSID.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.pix-link.com/page50?product_id=144; https://medium.com/%40igor.lrgomes/cve-2019-11877-credentials-stealing-through-xss-on-pix-link-repeater-9a98c344f58e; http://www.pix-link.com/page50?product_id=144
CVE: CVE-2019-6241
Published: 2019-06-10
Description: In Bevywise MQTTRoute 1.1 build 1018-002, a connect packet combined with a malformed unsubscribe request packet can be used to cause a Denial of Service attack against the broker.
CVSS Score: 7.5 (HIGH)
References: https://github.com/insi2304/MQTTRoute-fuzz/blob/master/MQTT_Route_crash.png; https://github.com/insi2304/MQTTRoute-fuzz/blob/master/MQTT_Route_crash.png
CVE: CVE-2019-11517
Published: 2019-06-10
Description: WampServer before 3.1.9 has CSRF in add_vhost.php because the synchronizer pattern implemented as remediation of CVE-2018-8817 was incomplete. An attacker could add/delete any vhosts without the consent of the owner.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-352
References: https://seclists.org/bugtraq/2019/Jun/10; https://seclists.org/bugtraq/2019/Jun/10
CVE: CVE-2019-12786
Published: 2019-06-10
Description: An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML injection of the value of the IPAddress key.
CVSS Score: 8.8 (HIGH)
CWE: CWE-77
References: https://github.com/TeamSeri0us/pocs/blob/master/iot/dlink/dir818-protected.pdf; https://github.com/TeamSeri0us/pocs/blob/master/iot/dlink/dir818-protected.pdf
CVE: CVE-2019-12787
Published: 2019-06-10
Description: An issue was discovered on D-Link DIR-818LW devices from 2.05.B03 to 2.06B01 BETA. There is a command injection in HNAP1 SetWanSettings via an XML injection of the value of the Gateway key.
CVSS Score: 8.8 (HIGH)
CWE: CWE-78
References: https://github.com/TeamSeri0us/pocs/blob/master/iot/dlink/dir818-2-protected.pdf; https://github.com/TeamSeri0us/pocs/blob/master/iot/dlink/dir818-2-protected.pdf
CVE: CVE-2019-9879
Published: 2019-06-10
Description: The WPGraphQL 0.2.3 plugin for WordPress allows remote attackers to register a new user with admin privileges, whenever new user registrations are allowed. This is related to the registerUser mutation.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-306
References: http://packetstormsecurity.com/files/153025/WordPress-WPGraphQL-0.2.3-Authentication-Bypass-Information-Disclosure.html; https://github.com/pentestpartners/snippets/blob/master/wp-graphql0.2.3_exploit.py; https://github.com/wp-graphql/wp-graphql/releases/tag/v0.3.0
CVE: CVE-2019-9880
Published: 2019-06-10
Description: An issue was discovered in the WPGraphQL 0.2.3 plugin for WordPress. By querying the 'users' RootQuery, it is possible, for an unauthenticated attacker, to retrieve all WordPress users details such as email address, role, and username.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-306
References: http://packetstormsecurity.com/files/153025/WordPress-WPGraphQL-0.2.3-Authentication-Bypass-Information-Disclosure.html; https://github.com/pentestpartners/snippets/blob/master/wp-graphql0.2.3_exploit.py; https://github.com/wp-graphql/wp-graphql/releases/tag/v0.3.0
CVE: CVE-2019-9881
Published: 2019-06-10
Description: The createComment mutation in the WPGraphQL 0.2.3 plugin for WordPress allows unauthenticated users to post comments on any article, even when 'allow comment' is disabled.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-306
References: http://packetstormsecurity.com/files/153025/WordPress-WPGraphQL-0.2.3-Authentication-Bypass-Information-Disclosure.html; https://github.com/pentestpartners/snippets/blob/master/wp-graphql0.2.3_exploit.py; https://github.com/wp-graphql/wp-graphql/releases/tag/v0.3.0
CVE: CVE-2019-11027
Published: 2019-06-10
Description: Ruby OpenID (aka ruby-openid) through 2.8.0 has a remotely exploitable flaw. This library is used by Rails web applications to integrate with OpenID Providers. Severity can range from medium to critical, depending on how a web application developer chose to employ the ruby-openid library. Developers who based their OpenID integration heavily on the "example app" provided by the project are at highest risk.
CVSS Score: 9.8 (CRITICAL)
References: https://github.com/openid/ruby-openid/issues/122; https://lists.debian.org/debian-lts-announce/2019/10/msg00014.html; https://marc.info/?l=openid-security&m=[PII_REDACTED]7534&w=2
CVE: CVE-2019-12788
Published: 2019-06-10
Description: An issue was discovered in Photodex ProShow Producer v9.0.3797 (an application that runs with Administrator privileges). It is possible to perform a buffer overflow via a crafted file.
CVSS Score: 7.8 (HIGH)
CWE: CWE-787
References: http://packetstormsecurity.com/files/153249/ProShow-9.0.3797-Privilege-Escalation.html; https://github.com/risataimpt/Archivos_del_Blog/tree/master/Proshow; https://risataim.blogspot.com/2019/06/exploit-local-para-proshow.html
CVE: CVE-2019-12790
Published: 2019-06-10
Description: In radare2 through 3.5.1, there is a heap-based buffer over-read in the r_egg_lang_parsechar function of egg_lang.c. This allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact because of missing length validation in libr/egg/egg.c.
CVSS Score: 7.8 (HIGH)
CWE: CWE-125
References: https://github.com/radare/radare2/issues/14211; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IEXZWAMVKGZKHALV4IVWQS2ORJKRH57U/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SX4TLTE75VYUGSPYEKMYFPUZMRDIR7O2/
CVE: CVE-2019-11881
Published: 2019-06-10
Description: A vulnerability exists in Rancher before 2.2.4 in the login component, where the errorMsg parameter can be tampered to display arbitrary content, filtering tags but not special characters or symbols. There's no other limitation of the message, allowing malicious users to lure legitimate users to visit phishing sites with scare tactics, e.g., displaying a "This version of Rancher is outdated, please visit https://malicious.rancher.site/upgrading" message.
CVSS Score: 4.7 (MEDIUM)
References: https://github.com/MauroEldritch/VanCleef; https://github.com/rancher/rancher/blob/v2.2.4/pkg/auth/providers/saml/saml_client.go#L282; https://github.com/rancher/rancher/commit/e59adbc[PII_REDACTED]d84d6e353421104be8da06e
CVE: CVE-2017-13717
Published: 2019-06-10
Description: Starry Station (aka Starry Router) sets the Access-Control-Allow-Origin header to "*". This allows any hosted file on any domain to make calls to the device's webserver and brute force the credentials and pull any information that is stored on the device. In this case, a user's Wi-Fi credentials are stored in clear text on the device and can be pulled easily.
CVSS Score: 8.8 (HIGH)
CWE: CWE-255
References: http://packetstormsecurity.com/files/153240/Starry-Router-Camera-PIN-Brute-Force-CORS-Incorrect.html; https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Starry_sec_issues.pdf; https://seclists.org/bugtraq/2019/Jun/8
CVE: CVE-2017-13718
Published: 2019-06-10
Description: The HTTP API supported by Starry Station (aka Starry Router) allows brute forcing the PIN setup by the user on the device, and this allows an attacker to change the Wi-Fi settings and PIN, as well as port forward and expose any internal device's port to the Internet. It was identified that the device uses custom Python code called "rodman" that allows the mobile appication to interact with the device. The APIs that are a part of this rodman Python file allow the mobile application to interact with the device using a secret, which is a uuid4 based session identifier generated by the device the first time it is set up. However, in some cases, these APIs can also use a security code. This security code is nothing but the PIN number set by the user to interact with the device when using the touch interface on the router. This allows an attacker on the Internet to interact with the router's HTTP interface when a user navigates to the attacker's website, and brute force the credentials. Also, since the device's server sets the Access-Control-Allow-Origin header to "*", an attacker can easily interact with the JSON payload returned by the device and steal sensitive information about the device.
CVSS Score: 8.0 (HIGH)
CWE: CWE-254
References: http://packetstormsecurity.com/files/153240/Starry-Router-Camera-PIN-Brute-Force-CORS-Incorrect.html; https://github.com/ethanhunnt/IoT_vulnerabilities/blob/master/Starry_sec_issues.pdf; https://seclists.org/bugtraq/2019/Jun/8
CVE: CVE-2019-10226
Published: 2019-06-10
Description: HTML Injection has been discovered in the v0.19.0 version of the Fat Free CRM product via an authenticated request to the /comments URI. NOTE: the vendor disputes the significance of this report because some HTML formatting (such as with an H1 element) is allowed, but there is a XSS protection mechanism.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/152263/Fat-Free-CRM-0.19.0-HTML-Injection.html; https://apidock.com/rails/ActionView/Helpers/TextHelper/simple_format; https://github.com/fatfreecrm/fat_free_crm/blob/master/app/views/comments/_comment.html.haml#L2
CVE: CVE-2019-10331
Published: 2019-06-11
Description: A cross-site request forgery vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier in Configuration#doTestConnection allowed attackers to connect to an attacker-specified URL using attacker-specified credentials.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/06/11/1; http://www.securityfocus.com/bid/108747; https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1410%20%281%29
CVE: CVE-2019-10332
Published: 2019-06-11
Description: A missing permission check in Jenkins ElectricFlow Plugin 1.1.5 and earlier in Configuration#doTestConnection allowed users with Overall/Read access to connect to an attacker-specified URL using attacker-specified credentials.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/06/11/1; http://www.securityfocus.com/bid/108747; https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1410%20%281%29
CVE: CVE-2019-10333
Published: 2019-06-11
Description: Missing permission checks in Jenkins ElectricFlow Plugin 1.1.5 and earlier in various HTTP endpoints allowed users with Overall/Read access to obtain information about the Jenkins ElectricFlow Plugin configuration and configuration of connected ElectricFlow instances.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/06/11/1; http://www.securityfocus.com/bid/108747; https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1410%20%282%29
CVE: CVE-2019-10334
Published: 2019-06-11
Description: Jenkins ElectricFlow Plugin 1.1.5 and earlier disabled SSL/TLS and hostname verification globally for the Jenkins master JVM when MultipartUtility.java is used to upload files.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-295
References: http://www.openwall.com/lists/oss-security/2019/06/11/1; http://www.securityfocus.com/bid/108747; https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1411
CVE: CVE-2019-10335
Published: 2019-06-11
Description: A stored cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.5 and earlier allowed attackers able to configure jobs in Jenkins or control the output of the ElectricFlow API to inject arbitrary HTML and JavaScript in the plugin-provided output on build status pages.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2019/06/11/1; http://www.securityfocus.com/bid/108747; https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1412
CVE: CVE-2019-10336
Published: 2019-06-11
Description: A reflected cross site scripting vulnerability in Jenkins ElectricFlow Plugin 1.1.6 and earlier allowed attackers able to control the output of the ElectricFlow API to inject arbitrary HTML and JavaScript in job configuration forms containing post-build steps provided by this plugin.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.openwall.com/lists/oss-security/2019/06/11/1; http://www.securityfocus.com/bid/108747; https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1420
CVE: CVE-2019-10337
Published: 2019-06-11
Description: An XML external entities (XXE) vulnerability in Jenkins Token Macro Plugin 2.7 and earlier allowed attackers able to control a the content of the input file for the "XML" macro to have Jenkins resolve external entities, resulting in the extraction of secrets from the Jenkins agent, server-side request forgery, or denial-of-service attacks.
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: http://www.openwall.com/lists/oss-security/2019/06/11/1; http://www.securityfocus.com/bid/108747; https://access.redhat.com/errata/RHSA-2019:1636
CVE: CVE-2019-10338
Published: 2019-06-11
Description: A cross-site request forgery vulnerability in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfiguration#doValidateClient allowed attackers to have Jenkins connect to an attacker-specified Kubernetes server, potentially leaking credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-352
References: http://www.openwall.com/lists/oss-security/2019/06/11/1; http://www.securityfocus.com/bid/108747; https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1379
CVE: CVE-2019-10339
Published: 2019-06-11
Description: A missing permission check in Jenkins JX Resources Plugin 1.0.36 and earlier in GlobalPluginConfiguration#doValidateClient allowed users with Overall/Read access to have Jenkins connect to an attacker-specified Kubernetes server, potentially leaking credentials.
CVSS Score: 8.8 (HIGH)
CWE: CWE-862
References: http://www.openwall.com/lists/oss-security/2019/06/11/1; http://www.securityfocus.com/bid/108747; https://jenkins.io/security/advisory/2019-06-11/#SECURITY-1379
CVE: CVE-2018-11800
Published: 2019-06-11
Description: SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on the GroupSummaryCounts related table.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.openwall.com/lists/oss-security/2019/05/09/1; http://www.securityfocus.com/bid/108291; https://lists.apache.org/thread.html/32aa471180f8978b5f0ed64fcd862769f73c40bbe6cb948abdc899bf%40%3Cdev.fineract.apache.org%3E
CVE: CVE-2018-11801
Published: 2019-06-11
Description: SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on a m_center data related table.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://www.openwall.com/lists/oss-security/2019/05/09/1; http://www.securityfocus.com/bid/108291; https://lists.apache.org/thread.html/32aa471180f8978b5f0ed64fcd862769f73c40bbe6cb948abdc899bf%40%3Cdev.fineract.apache.org%3E
CVE: CVE-2019-12749
Published: 2019-06-11
Description: dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~/.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid, allowing authentication bypass.
CVSS Score: 7.1 (HIGH)
CWE: CWE-59, CWE-59
References: http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00059.html; http://lists.opensuse.org/opensuse-security-announce/2019-06/msg00092.html; http://lists.opensuse.org/opensuse-security-announce/2019-07/msg00026.html
CVE: CVE-2019-12794
Published: 2019-06-11
Description: An issue was discovered in MISP 2.4.108. Organization admins could reset credentials for site admins (organization admins have the inherent ability to reset passwords for all of their organization's users). This, however, could be abused in a situation where the host organization of an instance creates organization admins. An organization admin could set a password manually for the site admin or simply use the API key of the site admin to impersonate them. The potential for abuse only occurs when the host organization creates lower-privilege organization admins instead of the usual site admins. Also, only organization admins of the same organization as the site admin could abuse this.
CVSS Score: 6.6 (MEDIUM)
CWE: CWE-269
References: https://github.com/MISP/MISP/commit/36b43f1306873cff87b7aa30cdc1a30b38c9c16a; https://github.com/MISP/MISP/commit/36b43f1306873cff87b7aa30cdc1a30b38c9c16a
CVE: CVE-2019-11334
Published: 2019-06-11
Description: An authentication bypass in website post requests in the Tzumi Electronics Klic Lock application 1.0.9 for mobile devices allows attackers to access resources (that are not otherwise accessible without proper authentication) via capture-replay. Physically proximate attackers can use this information to unlock unauthorized Tzumi Electronics Klic Smart Padlock Model 5686 Firmware 6.2.
CVSS Score: 3.7 (LOW)
CWE: CWE-294
References: http://packetstormsecurity.com/files/153280/Tzumi-Electronics-Klic-Lock-Authentication-Bypass.html; https://github.com/whitehatdefenses/KlicUnLock; http://packetstormsecurity.com/files/153280/Tzumi-Electronics-Klic-Lock-Authentication-Bypass.html
CVE: CVE-2019-12764
Published: 2019-06-11
Description: An issue was discovered in Joomla! before 3.9.7. The update server URL of com_joomlaupdate can be manipulated by non Super-Admin users.
CVSS Score: 6.5 (MEDIUM)
References: http://www.securityfocus.com/bid/108729; https://developer.joomla.org/security-centre/[PII_REDACTED]3-core-acl-hardening-of-com-joomlaupdate; http://www.securityfocus.com/bid/108729
CVE: CVE-2019-12765
Published: 2019-06-11
Description: An issue was discovered in Joomla! before 3.9.7. The CSV export of com_actionslogs is vulnerable to CSV injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-1236
References: http://www.securityfocus.com/bid/108736; https://developer.joomla.org/security-centre/[PII_REDACTED]1-core-csv-injection-in-com-actionlogs; http://www.securityfocus.com/bid/108736
CVE: CVE-2019-12766
Published: 2019-06-11
Description: An issue was discovered in Joomla! before 3.9.7. The subform fieldtype does not sufficiently filter or validate input of subfields. This leads to XSS attack vectors.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://www.securityfocus.com/bid/108735; https://developer.joomla.org/security-centre/[PII_REDACTED]2-core-xss-in-subform-field; http://www.securityfocus.com/bid/108735
CVE: CVE-2019-3409
Published: 2019-06-11
Description: All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by command injection vulnerability. Due to inadequate parameter verification, unauthorized users can take advantage of this vulnerability to control the user terminal system.
CVSS Score: 9.0 (CRITICAL)
CWE: CWE-78
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010662; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010662
CVE: CVE-2019-3410
Published: 2019-06-11
Description: All versions up to UKBB_WF820+_1.0.0B06 of ZTE WF820+ LTE Outdoor CPE product are impacted by Cross-Site Request Forgery vulnerability,which stems from the fact that WEB applications do not adequately verify whether requests come from trusted users. An attacker can exploit this vulnerability to send unexpected requests to the server through the affected client.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-352
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010662; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010662
CVE: CVE-2019-3411
Published: 2019-06-11
Description: All versions up to BD_R218V2.4 of ZTE MF920 product are impacted by information leak vulnerability. Due to some interfaces can obtain the WebUI login password without login, an attacker can exploit the vulnerability to obtain sensitive information about the affected components.
CVSS Score: 7.5 (HIGH)
CWE: CWE-306
References: http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010686; http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1010686