PT-2019-14001 · If · If.Svnadmin

Publicado 2019-09-06 · Atualizado 2019-09-09 · CVE-2019-15128

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions iF.SVNAdmin versions prior to 1.6.3

Description The issue allows for a CSRF attack via the svnadmin/usercreate.php file, enabling the creation of a user.

Recommendations For versions prior to 1.6.3, update to version 1.6.3 or later to resolve the issue.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2019-15128

Produtos afetados

If.Svnadmin

Referências · 3

• 🔥 https://zeroauth.ltd/blog/2019/08/23/cve-2019-15128-if-svnadmin-through-1-6-2-allows-svnadmin-usercreate-php-csrf-to-create-a-user · Exploit
• https://osv.dev/vulnerability/CVE-2019-15128 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-15128 · Nota de Segurança