What is CVE-2019-16133?

CVE-2019-16133 is a medium-severity vulnerability in Weaver Eteams Oa, classified under Insufficient Session Expiration. CVSS score: 6.5/10. Published 2019-09-09.

How severe is CVE-2019-16133?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Vulnerability in Weaver Eteams Oa

CVE-2019-16133

An issue was discovered in eteams OA v4.0.34. Because the session is not strictly checked, the account names and passwords of all employees in the company can be obtained by an ordinary account. Specifically, the attacker sends a jsessionid value for URIs under app/profile/summary/.

EPSS: 0.010 (60.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N.

Affected products

Weaver Eteams_oa — versions 4.0.34
N/a — versions n/a

Weakness classification (CWE)

CWE-613 — Insufficient Session Expiration

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2019-16133?: CVE-2019-16133 is a medium-severity vulnerability in Weaver Eteams Oa, classified under Insufficient Session Expiration. CVSS score: 6.5/10. Published 2019-09-09.
How severe is CVE-2019-16133?: Medium severity. CVSS v3 base score is 6.5 out of 10.