Lucene search

[email protected]CVE-2019-19793

HistoryDec 13, 2019 - 6:15 p.m.

CVE-2019-19793

2019-12-1318:15:11

CWE-367

[email protected]

web.nvd.nist.gov

cyxtera

appgate

sdp

client

cve-2019-19793

windows

privilege escalation

nvd

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.9%

JSON

In Cyxtera AppGate SDP Client 4.1.x through 4.3.x before 4.3.2 on Windows, a local or remote user from the same domain can gain privileges.

Affected configurations

NVD

Node

cyxteraappgate_sdpRange4.1.0–4.3.2

AND

microsoftwindowsMatch-

CPENameOperatorVersion
cyxtera:appgate_sdpcyxtera appgate sdplt4.3.2

CPE	Name	Operator	Version
cyxtera:appgate_sdp	cyxtera appgate sdp	lt	4.3.2

References

danishcyberdefence.dk/blog/appgate_part1

www.cyxtera.com/pdfs/appgate-sa-2019-07-0001.pdf

6.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

0.007 Low

EPSS

Percentile

79.9%

JSON

Related for CVE-2019-19793

cvelist1 prion1 nvd1