CVE-2019-9734

2019-04-2415:29:02

Google

osv.dev

6.8 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

49.5%

JSON

Aquarius CMS through 4.3.5 writes POST and GET parameters (including passwords) to a log file due to an overwriting of configuration parameters under certain circumstances.

CPENameOperatorVersion
aquarius-coreeq3.7.1
aquarius-coreeq3.8.0
aquarius-coreeq4.2.0
aquarius-coreeq4.3.1
aquarius-coreeq4.1.1
aquarius-coreeq3.6.7
aquarius-coreeq4.3.5
aquarius-coreeq3.7.0
aquarius-coreeq3.6.9
aquarius-coreeq3.9.0

Name	Operator	Version
aquarius-core	eq	3.7.1
aquarius-core	eq	3.8.0
aquarius-core	eq	4.2.0
aquarius-core	eq	4.3.1
aquarius-core	eq	4.1.1
aquarius-core	eq	3.6.7
aquarius-core	eq	4.3.5
aquarius-core	eq	3.7.0
aquarius-core	eq	3.6.9
aquarius-core	eq	3.9.0