CVE-2019-5029
🗓️ 13 Nov 2019 22:34:02Reported by talosType 
cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 139 Views🌐 WEB
| Reporter | Title | Published | Views | Family All 17 |
|---|---|---|---|---|
 | The vulnerability in the web interface of the Exhibitor service for managing ZooKeeper instances allows a attacker to execute arbitrary commands. | 17 Dec 201900:00 | – | bdu_fstec |
 | CVE-2019-5029 | 14 Dec 202300:02 | – | circl |
 | Exhibitor Command Injection Vulnerability | 14 Nov 201900:00 | – | cnvd |
 | Soabase Exhibitor UI Config Command Injection (CVE-2019-5029) | 16 Feb 202100:00 | – | checkpoint_advisories |
 | CVE-2019-5029 | 13 Nov 201922:34 | – | cvelist |
 | Exploit for OS Command Injection in Exhibitor_Project Exhibitor | 14 Dec 202301:05 | – | githubexploit |
 | Exhibitor Web UI 1.7.1 - Remote Code Execution | 7 Jul 202000:00 | – | exploitdb |
 | Exihibitor-RCE | 13 Oct 202617:45 | – | kitploit |
| CVE-2019-5029 | 10 Oct 202613:44 | – | kitploit |
 | CVE-2019-5029 | 13 Nov 201923:15 | – | nvd |
10
Node
[
{
"product": "Exhibitor",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "Tested version was compiled using the standalone pom.xml from the Exhibitor master branch"
}
]
}
]| Source | Link |
|---|---|
| talosintelligence | www.talosintelligence.com/vulnerability_reports/TALOS-2019-0790 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| javaEnvironment | request body | 10.0.0.200:8080/exhibitor/v1/config/set | Exhibitor Web UI 1.7.1 remote code execution via config.set by injecting commands into the java.env script field | CWE-78 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 02:37Current
9.7Critical risk
Vulners AI Score9.7
CVSS 3.19.8
CVSS 210
CVSS 39.8
EPSS0.5715