What is CVE-2019-17503?

CVE-2019-17503 is a vulnerability in N/a. Published 2019-10-11.

Is CVE-2019-17503 known to be exploited?

8 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2019-17503

An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/REGISTER.cmd (aka /osm_tiles/REGISTER.cmd) directly: it contains sensitive information about the database through the SQL…

EPSS: 0.902 (99.6th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

20142995/nuclei-templates
ARPSyndicate/kenzer-templates
StarCrossPortal/scalpel
anonymous364872/Rapier_
apif-review/APIF_
apit-review-account/apit-tool
cyb3r-w0lf/nuclei-template-collection
youcans896768/APIV_

References

github.com/Ramikan/Vulnerabilities/blob/master/Kirona-DRS 5.5.3.5 Multiple Vuln… (x_refsource_MISC)
packetstormsecurity.com/files/154838/Kirona-DRS-5.5.3.5-Information-Disclosure… (x_refsource_MISC)

Frequently asked questions

What is CVE-2019-17503?: CVE-2019-17503 is a vulnerability in N/a. Published 2019-10-11.
Is CVE-2019-17503 known to be exploited?: 8 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.