| ID |
CVE-2019-19893
|
| Sažetak |
In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can access the server's filesystem with the access rights of NT AUTHORITY\SYSTEM. |
| Reference |
|
| CVSS |
| Base: | 7.8 |
| Impact: | 6.9 |
| Exploitability: | 10.0 |
|
| Pristup |
| Vektor | Složenost | Autentikacija |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Povjerljivost | Cjelovitost | Dostupnost |
| COMPLETE |
NONE |
NONE |
|
| CVSS vektor |
AV:N/AC:L/Au:N/C:C/I:N/A:N |
| Zadnje važnije ažuriranje |
29-01-2020 - 20:50 |
| Objavljeno |
23-01-2020 - 21:15 |