PT-2019-12333 · Projectsend · Projectsend

Published 2019-04-26 · Updated 2019-04-30 · CVE-2019-11492

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ProjectSend versions prior to r1070

Description The issue allows user passwords to be written to the server logs.

Recommendations For versions prior to r1070, update to version r1070 or later to resolve the issue.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2019-11492

Affected Products

Projectsend

References · 3

• https://projectsend.org/change-log · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-11492 · Security Note
• https://osv.dev/vulnerability/CVE-2019-11492 · Vendor Advisory