CVE-2019-15137

{"id": "CVE-2019-15137", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 3.9}]}, "published": "2019-08-18T16:15:10.627", "references": [{"url": "https://arxiv.org/abs/1908.05310", "tags": ["Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://github.com/eProsima/Fast-RTPS/issues/441", "tags": ["Patch", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "https://arxiv.org/abs/1908.05310", "tags": ["Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://github.com/eProsima/Fast-RTPS/issues/441", "tags": ["Patch", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (instead of the permission expressions themselves), which can lead to unintended connections between participants in a Data Distribution Service (DDS) network."}, {"lang": "es", "value": "El plugin Access Control en eProsima Fast RTPS versiones hasta 1.9.0, permite coincidencias de patrones fnmatch con cadenas de nombre de tema (en lugar de las expresiones de permiso en s\u00ed mismas), lo que puede conllevar a conexiones no deseadas entre los participantes en una red Data Distribution Service (DDS)."}], "lastModified": "2024-11-21T04:28:08.073", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:eprosima:fast-rtps:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D2ACC29-ADF4-4A74-B5AF-8F68C389FA18", "versionEndIncluding": "1.9.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}