Lucene search

K
cvelistMitreCVELIST:CVE-2019-18886
HistoryNov 21, 2019 - 5:41 p.m.

CVE-2019-18886

2019-11-2117:41:54
mitre
www.cve.org
1

AI Score

5.4

Confidence

High

EPSS

0.002

Percentile

53.6%

An issue was discovered in Symfony 4.2.0 to 4.2.11 and 4.3.0 to 4.3.7. The ability to enumerate users was possible due to different handling depending on whether the user existed when making unauthorized attempts to use the switch users functionality. This is related to symfony/security.

AI Score

5.4

Confidence

High

EPSS

0.002

Percentile

53.6%