Lucene search

K

MitreCVELIST:CVE-2019-13033

HistoryJun 18, 2020 - 5:30 p.m.

CVE-2019-13033

2020-06-1817:30:46

mitre

www.cve.org

3.9 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. This license can be used to upload data to a central Lynis server. Although no data can be extracted by knowing the license key, it may be possible to upload the data of additional scans.

References

cisofy.com/security/cve/cve-2019-13033/

lists.debian.org/debian-lts-announce/2020/06/msg00024.html

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/JDCHEKNR3HPJRNHE5PYKFH5GNBADTPA7/

lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/UBFHIX6RTHCK37FXMAAXP4KGAMLUFDUD/

3.9 Low

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

14.1%

Related for CVELIST:CVE-2019-13033

osv2 nessus5 openvas3 nvd1 redhatcve1 cve1 debiancve1 ubuntucve1 prion1 debian1 kitploit1 amazon1 fedora2 freebsd1