Lucene search

[email protected]CVE-2019-6716

HistoryMar 21, 2019 - 4:01 p.m.

CVE-2019-6716

2019-03-2116:01:09

CWE-639

[email protected]

web.nvd.nist.gov

cve

2019

6716

insecure direct object reference

idor

logonbox

nervepoint access manager

active directory

denial of service

job modification

wicket core

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

9 High

AI Score

Confidence

High

0.068 Low

EPSS

Percentile

93.9%

JSON

An unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to enumerate internal Active Directory usernames and group names, and alter back-end server jobs (backup and synchronization jobs), which could allow for the possibility of a Denial of Service attack via a modified jobId parameter in a runJob.html GET request.

Affected configurations

NVD

Node

logonboxnervepoint_access_managerMatch1.2rg10

logonboxnervepoint_access_managerMatch1.2rg3

logonboxnervepoint_access_managerMatch1.2rg4

logonboxnervepoint_access_managerMatch1.2rg5

logonboxnervepoint_access_managerMatch1.2rg6

logonboxnervepoint_access_managerMatch1.2rg7

logonboxnervepoint_access_managerMatch1.2rg8

logonboxnervepoint_access_managerMatch1.2rg9

logonboxnervepoint_access_managerMatch1.3rg

logonboxnervepoint_access_managerMatch1.3rg1

logonboxnervepoint_access_managerMatch1.3rg2

logonboxnervepoint_access_managerMatch1.3rg3

logonboxnervepoint_access_managerMatch1.3rg4

logonboxnervepoint_access_managerMatch1.3rg5

logonboxnervepoint_access_managerMatch1.3rg6

logonboxnervepoint_access_managerMatch1.3rg7

logonboxnervepoint_access_managerMatch1.3rg8

logonboxnervepoint_access_managerMatch1.4rg

logonboxnervepoint_access_managerMatch1.4rg1

logonboxnervepoint_access_managerMatch1.4rg2

logonboxnervepoint_access_managerMatch1.4rg3

CPENameOperatorVersion
logonbox:nervepoint_access_managerlogonbox nervepoint access managereq1.2
logonbox:nervepoint_access_managerlogonbox nervepoint access managereq1.3
logonbox:nervepoint_access_managerlogonbox nervepoint access managereq1.4

CPE	Name	Operator	Version
logonbox:nervepoint_access_manager	logonbox nervepoint access manager	eq	1.2
logonbox:nervepoint_access_manager	logonbox nervepoint access manager	eq	1.3
logonbox:nervepoint_access_manager	logonbox nervepoint access manager	eq	1.4

References

packetstormsecurity.com/files/151373/LongBox-Limited-Access-Manager-Insecure-Direct-Object-Reference.html

www.exploit-db.com/exploits/46254/

www.logonbox.com/en/

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

9.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:H

9 High

AI Score

Confidence

High

0.068 Low

EPSS

Percentile

93.9%

JSON

Related for CVE-2019-6716

nvd1 packetstorm1 prion1 cvelist1 zdt1