Information disclosure in Honeypress Project

CVE-2019-11633

HoneyPress through 2016-09-27 can be fingerprinted by attackers because of the ingrained unique www.atxsec.com and ayylmao.wpengine.com hostnames within the fake WordPress templates. This allows attackers to discover and avoid this honeypot system.

Vulnerability class: Information Disclosure

EPSS: 0.014 (70.1th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2019-11633?
CVE-2019-11633 is a high-severity vulnerability in Honeypress Project, classified under Information Disclosure. CVSS score: 7.5/10. Published 2019-05-01.
How severe is CVE-2019-11633?
High severity. CVSS v3 base score is 7.5 out of 10.