PT-2020-10056 · Paessler · Prtg

Aleksandr Melkikh · Published 2020-02-03 · Updated 2021-07-21 · CVE-2019-19119

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PRTG versions 7.x through 19.4.53

Description The issue is related to insufficient access control on local registry keys for the Core Server Service. This allows a non-administrative user on the local machine to access administrative credentials.

Recommendations For versions 7.x through 19.4.53, consider restricting access to the Core Server Service to minimize the risk of exploitation until a patch is available.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2019-19119

Affected Products

Prtg

References · 7

• https://blog.paessler.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-19119 · Security Note
• https://blog.paessler.com/prtg-release-19.4.54-includes-2-brand-new-sensors-for-disk-and-storage · Vendor Advisory
• https://paessler.com/prtg/history/preview · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-19119 · Vendor Advisory
• https://t.me/cvenotify/16815 · Telegram Post
• https://ptsecurity.com/ww-en/about/news/positive-technologies-helps-in-eliminating-vulnerability-in-software-for-monitoring-visualizing-and-controlling-conditions-of-it-infrastructure · Note