Lucene search

[email protected]NVD:CVE-2019-15137

HistoryAug 18, 2019 - 4:15 p.m.

CVE-2019-15137

2019-08-1816:15:10

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

30.9%

JSON

The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (instead of the permission expressions themselves), which can lead to unintended connections between participants in a Data Distribution Service (DDS) network.

Affected configurations

Nvd

Node

eprosimafast-rtpsRange≤1.9.0

VendorProductVersionCPE
eprosimafast-rtps*cpe:2.3:a:eprosima:fast-rtps:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
eprosima	fast-rtps	*	cpe:2.3:a:eprosima:fast-rtps::::::::

References

arxiv.org/abs/1908.05310

github.com/eProsima/Fast-RTPS/issues/441

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

30.9%

JSON

Related for NVD:CVE-2019-15137

osv1 cvelist1 cve1 prion1