PT-2020-9837 · Genius Bytes · Genius Server

Published 2020-04-29 · Updated 2021-07-21 · CVE-2019-16653

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Genius Bytes Genius Server (Genius CDDS) version 3.2.2

Description The issue allows remote authenticated users to gain admin privileges due to a flaw in an application plugin.

Recommendations For Genius Bytes Genius Server (Genius CDDS) version 3.2.2, update to a version that fixes this issue, as the current version allows remote authenticated users to escalate their privileges. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2019-16653

Affected Products

Genius Server

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-16653 · Security Note
• https://osv.dev/vulnerability/CVE-2019-16653 · Vendor Advisory
• https://www2.deloitte.com/it/it/pages/risk/articles/security-advisory-article---deloitte-italy---risk.html · Vendor Advisory
• https://t.me/cvenotify/3394 · Telegram Post