Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-19893
HistoryJan 23, 2020 - 9:15 p.m.

CVE-2019-19893

2020-01-2321:15:12
CWE-22
[email protected]
web.nvd.nist.gov
3

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.006

Percentile

78.4%

JSON

In IXP EasyInstall 6.2.13723, there is Directory Traversal on TCP port 8000 via the Engine Service by an unauthenticated attacker, who can access the server’s filesystem with the access rights of NT AUTHORITY\SYSTEM.

Affected configurations

Nvd
Node
ixpdataeasyinstallMatch6.2.13723
VendorProductVersionCPE
ixpdataeasyinstall6.2.13723cpe:2.3:a:ixpdata:easyinstall:6.2.13723:*:*:*:*:*:*:*

Related

cve 1
prion 1
cvelist 1
cve
cve
CVE-2019-19893
2020-01-23 21:15:12
prion
prion
Directory traversal
2020-01-23 21:15:00
cvelist
cvelist
CVE-2019-19893
2020-01-23 20:55:25

CVSS2

7.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:C/I:N/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.006

Percentile

78.4%

JSON
Related for NVD:CVE-2019-19893
cve1prion1cvelist1