5.3
CVE-2019-18865
- EPSS 0.43%
- Veröffentlicht 07.05.2020 13:15:11
- Zuletzt bearbeitet 21.11.2024 04:33:44
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginInformation disclosure via error message discrepancies in authentication functions in Blaauw Remote Kiln Control through v3.00r4 allows an unauthenticated attacker to enumerate valid usernames.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Blaauwproducts ≫ Remote Kiln Control Version < 3.0.0
Blaauwproducts ≫ Remote Kiln Control Version3.0.0 Update-
Blaauwproducts ≫ Remote Kiln Control Version3.0.0 Updatev4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.43% | 0.595 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5.3 | 3.9 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:P/I:N/A:N
|
CWE-209 Generation of Error Message Containing Sensitive Information
The product generates an error message that includes sensitive information about its environment, users, or associated data.