CVE-2019-12887

2019-06-2714:15:10

Google

osv.dev

8.2 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

66.3%

JSON

KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2).

CPENameOperatorVersion
linotpeqdev/2.8.0.3rc1
linotpeqrelease/2.9.3.3
linotpeqrelease/2.10
linotpeqdev/2.7.1rc1
linotpeqdev/2.9.3.1rc0
linotpeqrelease/2.9.1.3
linotpeqdev/2.7.1rc0
linotpeqdev/2.9.3.2rc0
linotpeqrelease/2.9.0.1
linotpeqdev/2.7.2.1b3

Name	Operator	Version
linotp	eq	dev/2.8.0.3rc1
linotp	eq	release/2.9.3.3
linotp	eq	release/2.10
linotp	eq	dev/2.7.1rc1
linotp	eq	dev/2.9.3.1rc0
linotp	eq	release/2.9.1.3
linotp	eq	dev/2.7.1rc0
linotp	eq	dev/2.9.3.2rc0
linotp	eq	release/2.9.0.1
linotp	eq	dev/2.7.2.1b3