Lucene search
PRIOn knowledge basePRION:CVE-2019-18998HistoryFeb 17, 2020 - 7:15 p.m.
Improper access control
2020-02-1719:15:00
PRIOn knowledge base
www.prio-n.com
3
Insufficient access control in the web interface of ABB Asset Suite versions 9.0 to 9.3, 9.4 prior to 9.4.2.6, 9.5 prior to 9.5.3.2 and 9.6.0 enables full access to directly referenced objects. An attacker with knowledge of a resource’s URL can access the resource directly.
| CPE | Name | Operator | Version |
|---|---|---|---|
| asset_suite | eq | 9.6.0 | |
| asset_suite | ge | 9.5.0 | |
| asset_suite | lt | 9.5.3.2 | |
| asset_suite | ge | 9.4 | |
| asset_suite | lt | 9.4.2.6 | |
| asset_suite | ge | 9.0.0 | |
| asset_suite | le | 9.3.0 |
Related
cvelist
cvelist
CVE-2019-18998 Asset Suite Direct Object Reference Access
2020-02-17 18:40:38
nvd
nvd
CVE-2019-18998
2020-02-17 19:15:12
cve
cve
CVE-2019-18998
2020-02-17 19:15:12
ics
ics
ABB Asset Suite
2020-03-12 12:00:00