CVE-2019-16949

An issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. A user is allowed to send an archive of their chat log to an email address specified at the beginning of the chat (where the user enters in their name and e-mail address). This POST request can be modified to change the message as well as the end recipient of the message. The e-mail address will have the same domain name and user as the product allotted. This can be used in phishing campaigns against users on the same domain.

CVSS v3 6.5 MEDIUM
CVSS v2.0 4.0 MEDIUM

6.5^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
https://mjlanders.com/2019/11/07/multiple-vulnerabilities-found-in-enghouse-zeacom-web-chat/	Exploit Third Party Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:enghouse:web_chat:6.1.300.31:::::::*
	cpe:2.3:a:enghouse:web_chat:6.2.284.34:::::::*

History

No history.

Information

Published : 2019-11-13 18:15

Updated : 2024-02-28 17:28

NVD link : CVE-2019-16949

Mitre link : CVE-2019-16949

CVE.ORG link : CVE-2019-16949

JSON object : View

Products Affected

enghouse

web_chat

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2019-16949", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2019-11-13T18:15:10.937", "references": [{"url": "https://mjlanders.com/2019/11/07/multiple-vulnerabilities-found-in-enghouse-zeacom-web-chat/", "tags": ["Exploit", "Third Party Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Enghouse Web Chat 6.1.300.31 and 6.2.284.34. A user is allowed to send an archive of their chat log to an email address specified at the beginning of the chat (where the user enters in their name and e-mail address). This POST request can be modified to change the message as well as the end recipient of the message. The e-mail address will have the same domain name and user as the product allotted. This can be used in phishing campaigns against users on the same domain."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en Enghouse Web Chat versiones 6.1.300.31 y 6.2.284.34. Un usuario esta habilitado para enviar un archivo de su registro de chat a una direcci\u00f3n de correo electr\u00f3nico especificada al comienzo del chat (donde el usuario ingresa su nombre y direcci\u00f3n de correo electr\u00f3nico). Esta petici\u00f3n POST puede ser modificada para cambiar el mensaje y el destinatario final del mensaje. La direcci\u00f3n de correo electr\u00f3nico tendr\u00e1 el mismo nombre de dominio y usuario que el producto asignado. Esto puede ser usado en campa\u00f1as de phishing contra usuarios en el mismo dominio."}], "lastModified": "2019-11-15T19:09:10.677", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:enghouse:web_chat:6.1.300.31:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADECAF52-1FE4-4CB5-8128-0855A26B4424"}, {"criteria": "cpe:2.3:a:enghouse:web_chat:6.2.284.34:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77214FC3-B6F4-4DB5-82E8-4198005F8C43"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}