PT-2019-19937 · Joomla · Harmis Je Messenger

Published 2019-03-29 · Updated 2023-01-31 · CVE-2019-9921

Positive Technologies (AI Summary)

CVSS v3.1

7.7

High

Base vector

AC:L/AV:N/A:N/C:H/I:N/PR:L/S:C/UI:N

Name of the Vulnerable Software and Affected Versions Harmis JE Messenger component version 1.2.2

Description An issue in the Harmis JE Messenger component for Joomla allows reading information that should only be accessible by a different user.

Recommendations For version 1.2.2, update to a newer version that contains a fix for this issue, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2019-9921

Affected Products

Harmis Je Messenger

References · 4

• 🔥 https://github.com/azd-cert/CVE/blob/master/CVEs/CVE-2019-9921.md · Exploit
• https://osv.dev/vulnerability/CVE-2019-9921 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-9921 · Security Note
• https://extensions.joomla.org/extension/je-messenger · Note