PT-2019-14367 · Sitos · Sitos Six

Published 2019-10-07 · Updated 2019-10-09 · CVE-2019-15747

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SITOS six Build version 6.2.1

Description The issue allows a user with the Seminar Coordinator role to escalate their permissions to the Systemadministrator role due to insufficient server-side checks.

Recommendations For SITOS six Build version 6.2.1, consider restricting the Seminar Coordinator role's access to sensitive areas of the system until a fix is available, and review server-side checks to ensure proper permission validation.

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2019-15747

Affected Products

Sitos Six

References · 3

• https://osv.dev/vulnerability/CVE-2019-15747 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-15747 · Security Note
• https://contextis.com/en/resources/advisories/cve-2019-15747 · Note