What is CVE-2019-5640?

CVE-2019-5640 is a low-severity vulnerability in Rapid7 Nexpose, classified under Information Disclosure. CVSS score: 3.3/10. Published 2021-11-22.

How severe is CVE-2019-5640?

Low severity. CVSS v3 base score is 3.3 out of 10.

Information disclosure in Rapid7 Nexpose

CVE-2019-5640

Rapid7 Nexpose versions prior to 6.6.114 suffer from an information exposure issue whereby, when the user's session has ended due to inactivity, an attacker can use the inspect element browser feature to remove the login panel and view the details available in the last webpage visited by previous user

Vulnerability class: Information Disclosure

EPSS: 0.005 (41.3th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Rapid7 Nexpose — versions 1.0

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@rapid7.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-5640?: CVE-2019-5640 is a low-severity vulnerability in Rapid7 Nexpose, classified under Information Disclosure. CVSS score: 3.3/10. Published 2021-11-22.
How severe is CVE-2019-5640?: Low severity. CVSS v3 base score is 3.3 out of 10.