6.5
CVE-2019-9697
- EPSS 0.41%
- Published 30.08.2019 09:15:21
- Last modified 21.11.2024 04:52:07
- Source secure@symantec.com
- Teams watchlist Login
- Open Login
An information disclosure vulnerability in the Management Center (MC) REST API 2.0, 2.1, and 2.2 prior to 2.2.2.1 allows a malicious authenticated user to obtain passwords for external backup and CPL policy import servers that they might not otherwise be authorized to access.
Data is provided by the National Vulnerability Database (NVD)
Symantec ≫ Management Center Version >= 2.2 < 2.2.2.1
Symantec ≫ Management Center Version2.0
Symantec ≫ Management Center Version2.1
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.41% | 0.583 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
|
| nvd@nist.gov | 4 | 8 | 2.9 |
AV:N/AC:L/Au:S/C:P/I:N/A:N
|