Vulnerability in Anomali Agave
CVE-2019-11641
Anomali Agave (formerly Drupot) through 1.0.0 fails to avoid fingerprinting by including predictable data and minimal variation in size within HTML templates, giving attackers the ability to detect and avoid this system.
EPSS: 0.013 (68.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 7.5 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Anomali Agave
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Third Party Advisory, x_refsource_MISC, Issue Tracking)
Frequently asked questions
- What is CVE-2019-11641?
- CVE-2019-11641 is a high-severity vulnerability in Anomali Agave, classified under Use of Insufficiently Random Values. CVSS score: 7.5/10. Published 2019-05-01.
- How severe is CVE-2019-11641?
- High severity. CVSS v3 base score is 7.5 out of 10.