What is CVE-2019-19989?

CVE-2019-19989 is a high-severity vulnerability in Seling Visual_access_manager, classified under Missing Authorization. CVSS score: 7.5/10. Published 2020-02-26.

How severe is CVE-2019-19989?

High severity. CVSS v3 base score is 7.5 out of 10.

Auth bypass in Seling Visual_access_manager

CVE-2019-19989

An issue was discovered in Selesta Visual Access Manager (VAM) 4.15.0 through 4.29. Several PHP pages, and other type of files, are reachable by any user without checking for user identity and authorization.

Vulnerability class: Broken Access Control

EPSS: 0.013 (67.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.5 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N.

Affected products

Seling Visual_access_manager
N/a — versions n/a

Weakness classification (CWE)

CWE-862 — Missing Authorization

References

cve@mitre.org (Exploit, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Product, x_refsource_MISC)
cve@mitre.org (Product, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2019-19989?: CVE-2019-19989 is a high-severity vulnerability in Seling Visual_access_manager, classified under Missing Authorization. CVSS score: 7.5/10. Published 2020-02-26.
How severe is CVE-2019-19989?: High severity. CVSS v3 base score is 7.5 out of 10.