PT-2019-19943 · Cfengine · Cfengine Enterprise

Publicado 2019-06-06 · Atualizado 2020-08-24 · CVE-2019-9929

Positive Technologies (AI Summary)

CVSS v2.0

9.0

Alta

Vetor base

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CFEngine Enterprise version 3.12.1

Description The issue is related to insecure permissions in the software.

Recommendations For version 3.12.1, update to a version that addresses the insecure permissions issue.

Exploit

Correção

Insertion into Log File

Enumeração de Fraquezas

CWE-532

Identificadores relacionados

CVE-2019-9929

Produtos afetados

Cfengine Enterprise

Referências · 4

• 🔥 https://cfengine.com/company/blog-detail/cve-2019-9929-internal-authentication-secrets-leaked-in-logs · Exploit
• https://osv.dev/vulnerability/CVE-2019-9929 · Aviso do Fabricante
• https://cfengine.com/product/latest-release · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-9929 · Nota de Segurança