CVE-2019-19539

Description

An issue was discovered in Idelji Web ViewPoint H01ABO-H01BY and L01ABP-L01ABZ, Web ViewPoint Plus H01AAG-H01AAQ and L01AAH-L01AAR, and Web ViewPoint Enterprise H01-H01AAE and L01-L01AAF. By reading ADB or AADB file content within the Installation subvolume, a Guardian user can discover the password of the group.user or alias who acknowledges events from the WVP Events screen.

Risk Information

Base Score

5.5

MODERATE

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS Score

Exploitation Probability

0.117

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2019-19539 are affected in web_viewpoint_t0320 t0320h01^aby	NCM
Vulnerabilities CVE-2019-19539 are affected in web_viewpoint_t0952 t0952l01^aar	NCM
Vulnerabilities CVE-2019-19539 are affected in web_viewpoint_t0952 t0952h01^aaq	NCM
Vulnerabilities CVE-2019-19539 are affected in web_viewpoint_t0986 t0986h01^aae	NCM
Vulnerabilities CVE-2019-19539 are affected in web_viewpoint_t0986 t0320l01^abz	NCM
Insufficiently Protected Credentials Vulnerability (CVE-2019-19539)	NCM

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234