PT-2019-19943 · Cfengine · Cfengine Enterprise

Published 2019-06-06 · Updated 2020-08-24 · CVE-2019-9929

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CFEngine Enterprise version 3.12.1

Description The issue is related to insecure permissions in the software.

Recommendations For version 3.12.1, update to a version that addresses the insecure permissions issue.

Exploit

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2019-9929

Affected Products

Cfengine Enterprise

References · 4

• 🔥 https://cfengine.com/company/blog-detail/cve-2019-9929-internal-authentication-secrets-leaked-in-logs · Exploit
• https://osv.dev/vulnerability/CVE-2019-9929 · Vendor Advisory
• https://cfengine.com/product/latest-release · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-9929 · Security Note