PT-2019-17848 · Overit · Overit Geocall

Published 2019-04-01 · Updated 2022-10-14 · CVE-2019-5890

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions OverIT Geocall version 6.3 before build 2:346977

Description An issue in OverIT Geocall allows an authenticated user to obtain access to the Administrative control panel and execute administrative functions due to weak authentication and session management.

Recommendations For OverIT Geocall version 6.3 before build 2:346977, update to a version that includes build 2:346977 or later to resolve the issue. As a temporary workaround, consider restricting access to the Administrative control panel to minimize the risk of exploitation.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2019-5890

Affected Products

Overit Geocall

References · 4

• https://osv.dev/vulnerability/CVE-2019-5890 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-5890 · Security Note
• https://web.archive.org/web/20200327142627/https://quantumleap.it/geocall-v-6-3-multiple-vulnerabilities · Note
• https://quantumleap.it/geocall-v-6-3-multiple-vulnerabilities · Note