PT-2020-10126 · Xhq · Xhq

Published 2020-12-14 · Updated 2020-12-15 · CVE-2019-19289

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions XHQ versions prior to 6.1

Description A Cross-Site Request Forgery (CSRF) attack could be allowed through the web interface if an unsuspecting user is tricked into accessing a malicious link.

Recommendations For versions prior to 6.1, update to version 6.1 or later to resolve the issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2019-19289

Affected Products

Xhq

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-19289 · Security Note
• https://osv.dev/vulnerability/CVE-2019-19289 · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-712690.pdf · Vendor Advisory
• https://t.me/cibsecurity/20787 · Telegram Post