PT-2019-12053 · Computrols+1 · Computrols Cbas+1

Published 2019-05-23 · Updated 2020-08-24 · CVE-2019-10849

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Computrols CBAS version 18.0.0

Description The issue allows for unprotected Subversion (SVN) directory and source code disclosure.

Recommendations For Computrols CBAS version 18.0.0, consider restricting access to the SVN directory to minimize the risk of source code disclosure until a patch is available.

Exploit

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2019-10849

Affected Products

Computrols Cbas

Subversion

References · 6

• 🔥 https://exploit-db.com/exploits/47629 · Exploit
• https://osv.dev/vulnerability/CVE-2019-10849 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-10849 · Security Note
• https://applied-risk.com/index.php/download_file/view/196/165 · Note
• http://packetstormsecurity.com/files/155248/Computrols-CBAS-Web-19.0.0-Information-Disclosure.html · Note
• https://applied-risk.com/labs/advisories · Note