Lucene search

[email protected]CVE-2019-13497

HistoryNov 04, 2019 - 6:15 p.m.

CVE-2019-13497

2019-11-0418:15:12

CWE-352

[email protected]

web.nvd.nist.gov

cve-2019-13497

one identity

cloud access manager

csrf

vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

35.5%

JSON

One Identity Cloud Access Manager before 8.1.4 Hotfix 1 allows CSRF for logout requests.

Affected configurations

NVD

Node

oneidentitycloud_access_managerRange<8.1.4

oneidentitycloud_access_managerMatch8.1.4-

CPENameOperatorVersion
oneidentity:cloud_access_manageroneidentity cloud access managerlt8.1.4

CPE	Name	Operator	Version
oneidentity:cloud_access_manager	oneidentity cloud access manager	lt	8.1.4

References

github.com/FurqanKhan1/CVE-2019-13497

support.oneidentity.com/cloud-access-manager/kb/311391/cloud-access-manager-8-1-4-hotfix-1

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

35.5%

JSON

Related for CVE-2019-13497

cvelist1 nvd1 githubexploit1 prion1