CVE-2019-9697

🗓️ 29 Aug 2019 22:43:44Reported by symantecType

An information disclosure vulnerability in the Management Center (MC) REST API 2.0, 2.1, and 2.2 prior to 2.2.2.1 allows a malicious authenticated user to obtain passwords for external backup and CPL policy import servers that they might not otherwise be authorized to access

Reporter	Title	Published	Views	Family All 7
Cvelist	CVE-2019-9697	29 Aug 201922:43	–	cvelist
EUVD	EUVD-2019-19063	7 Oct 202500:30	–	euvd
NVD	CVE-2019-9697	30 Aug 201909:15	–	nvd
OSV	CVE-2019-9697	30 Aug 201909:15	–	osv
Prion	Information disclosure	30 Aug 201909:15	–	prion
RedhatCVE	CVE-2019-9697	22 May 202508:58	–	redhatcve
Symantec	Information Disclosure Vulnerability in MC	27 Aug 201908:00	–	symantec

NVD

Node

symantec management_centerRange2.2–2.2.2.1

symantec management_centerMatch2.0

symantec management_centerMatch2.1

[
  {
    "product": "Management Center (MC)",
    "vendor": "Symantec Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "2.0"
      },
      {
        "status": "affected",
        "version": "2.1"
      },
      {
        "status": "affected",
        "version": "2.2 prior to 2.2.2.1"
      }
    ]
  }
]

Source	Link
support	www.support.symantec.com/us/en/article.SYMSA1480.html

21 Nov 2024 04:52Current

6Medium risk

Vulners AI Score6

CVSS 24

CVSS 36.5

EPSS0.00387