Information disclosure in Honeypress Project
CVE-2019-11633
HoneyPress through 2016-09-27 can be fingerprinted by attackers because of the ingrained unique www.atxsec.com and ayylmao.wpengine.com hostnames within the fake WordPress templates. This allows attackers to discover and avoid this honeypot system.
Vulnerability class: Information Disclosure
EPSS: 0.014 (70.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Honeypress_project Honeypress
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2019-11633?
- CVE-2019-11633 is a high-severity vulnerability in Honeypress Project, classified under Information Disclosure. CVSS score: 7.5/10. Published 2019-05-01.
- How severe is CVE-2019-11633?
- High severity. CVSS v3 base score is 7.5 out of 10.