CVE-2019-11816

2019-05-2022:29:00

Google

osv.dev

6.8 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.4%

JSON

Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request.

CPENameOperatorVersion
coreeq15.1.11.3
coreeq16.7.a
coreeq18.1.b
coreeq15.1.2
coreeq19.1.5
coreeq15.1.9
coreeq16.7.b
coreeq17.1.b
coreeq19.1.1
coreeq15.1.7.2