PT-2019-11627 · Charcoal Se · Smokedetector

Published 2019-07-29 · Updated 2022-04-18 · CVE-2019-1020011

Positive Technologies (AI Summary)

CVSS v3.1

9.0

Critical

Base vector

AC:L/AV:N/A:L/C:H/I:H/PR:H/S:C/UI:N

Name of the Vulnerable Software and Affected Versions: SmokeDetector (affected versions not specified)

Description: The issue concerns SmokeDetector, which is capable of automatically deploying updated copies without the authority of server operators.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-669

Related Identifiers

CVE-2019-1020011

Affected Products

Smokedetector

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2019-1020011 · Security Note
• https://github.com/Charcoal-SE/SmokeDetector/security/advisories/GHSA-5w85-7mwr-v44q · Note