PT-2019-18134 · Wso2 · Wso2 Dashboard Server

Publicado 2019-05-14 · Atualizado 2019-05-14 · CVE-2019-6516

Positive Technologies (AI Summary)

CVSS v3.1

5.8

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions WSO2 Dashboard Server version 2.0.0

Description An issue allows the application to be forced into performing requests to the internal workstation, effectively allowing port-scanning, and to adjacent workstations, enabling network-scanning.

Recommendations For WSO2 Dashboard Server version 2.0.0, consider restricting access to internal and adjacent workstations to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SSRF

Enumeração de Fraquezas

CWE-918

Identificadores relacionados

CVE-2019-6516

Produtos afetados

Wso2 Dashboard Server

Referências · 5

• https://excellium-services.com/cert-xlm-advisory · Nota
• https://osv.dev/vulnerability/CVE-2019-6516 · Aviso do Fabricante
• https://wso2.com/security-patch-releases/dashboard-server · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-6516 · Nota de Segurança
• https://cds.thalesgroup.com/en/tcs-cert/CVE-2019-6516 · Nota