PT-2019-15365 · Thycotic · Thycotic Secret Server

Publicado 2019-10-23 · Atualizado 2019-10-30 · CVE-2019-18355

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Thycotic Secret Server versions prior to 10.7

Description A Server-Side Request Forgery (SSRF) issue was discovered in the legacy Web launcher.

Recommendations For versions prior to 10.7, update to version 10.7 or later to resolve the issue.

Correção

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2019-18355

Produtos afetados

Thycotic Secret Server

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-18355 · Nota de Segurança
• https://thycotic.force.com/support/s/article/SS-RN-EXT-Secret-Server-10-7-000000-Legacy-Release-Notes · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-18355 · Aviso do Fabricante