Aquaverde GmbH Aquarius CMS prior to version 4.1.1 is affected by: Incorrect Access Control. The impact is: The access to the log file is not restricted. It contains sensitive information like passwords etc. The component is: log file. The attack vector is: open the file.
References
Link | Resource |
---|---|
https://github.com/aquaverde/aquarius-core | Third Party Advisory |
https://github.com/aquaverde/aquarius-core/commit/e1af89aa9df07ea265d879518ede9eb98aa494e0 | Patch Third Party Advisory |
https://github.com/aquaverde/aquarius-core | Third Party Advisory |
https://github.com/aquaverde/aquarius-core/commit/e1af89aa9df07ea265d879518ede9eb98aa494e0 | Patch Third Party Advisory |
Configurations
History
21 Nov 2024, 04:18
Type | Values Removed | Values Added |
---|---|---|
References | () https://github.com/aquaverde/aquarius-core - Third Party Advisory | |
References | () https://github.com/aquaverde/aquarius-core/commit/e1af89aa9df07ea265d879518ede9eb98aa494e0 - Patch, Third Party Advisory |
Information
Published : 2019-07-15 18:15
Updated : 2024-11-21 04:18
NVD link : CVE-2019-1010308
Mitre link : CVE-2019-1010308
CVE.ORG link : CVE-2019-1010308
JSON object : View
Products Affected
aquaverde
- aquarius_cms
CWE
CWE-522
Insufficiently Protected Credentials