PT-2019-9115 · Five9 · Five9 Agent Desktop Plus

0Tkombo · Published 2019-03-15 · Updated 2019-10-03 · CVE-2018-15509

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Five9 Agent Desktop Plus version 10.0.70

Description The issue is related to Incorrect Access Control.

Recommendations For Five9 Agent Desktop Plus version 10.0.70, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2018-15509

Affected Products

Five9 Agent Desktop Plus

References · 3

• 🔥 https://0tkombo.wixsite.com/0tkombo/blog/five9-dos-websocket-access · Exploit
• https://osv.dev/vulnerability/CVE-2018-15509 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-15509 · Security Note