Lucene search

[email protected]CVE-2019-19669

HistoryFeb 10, 2020 - 6:15 p.m.

CVE-2019-19669

2020-02-1018:15:12

CWE-352

[email protected]

web.nvd.nist.gov

csrf

vulnerability

web file manager

rumpus ftp

security

nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.8%

JSON

A CSRF vulnerability exists in the Upload Center Forms Component of Web File Manager in Rumpus FTP 8.2.9.1. This could allow an attacker to delete, create, and update the upload forms via RAPR/TriggerServerFunction.html.

Affected configurations

NVD

Node

maxumrumpus_ftpMatch8.2.9.1windows

CPENameOperatorVersion
maxum:rumpus_ftpmaxum rumpus ftpeq8.2.9.1

CPE	Name	Operator	Version
maxum:rumpus_ftp	maxum rumpus ftp	eq	8.2.9.1

References

github.com/harshit-shukla/CVE

github.com/harshit-shukla/CVE/blob/master/CVE-2019-19669.md

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

21.8%

JSON

Related for CVE-2019-19669

nvd1 cvelist1 prion1