What is CVE-2019-5641?

CVE-2019-5641 is a low-severity vulnerability in Rapid7 Insightvm, classified under Information Disclosure. CVSS score: 3.3/10. Published 2022-09-21.

How severe is CVE-2019-5641?

Low severity. CVSS v3 base score is 3.3 out of 10.

Information disclosure in Rapid7 Insightvm

CVE-2019-5641

Rapid7 InsightVM suffers from an information exposure issue whereby, when the user's session has ended due to inactivity, an attacker can use the Inspect Element browser feature to remove the login panel and view the details available in t…

Vulnerability class: Information Disclosure

EPSS: 0.003 (25.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.3 (Low). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Rapid7 Insightvm — versions 6.6.160

Weakness classification (CWE)

CWE-200 — Information Disclosure
CWE-613 — Insufficient Session Expiration

References

cve@rapid7.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-5641?: CVE-2019-5641 is a low-severity vulnerability in Rapid7 Insightvm, classified under Information Disclosure. CVSS score: 3.3/10. Published 2022-09-21.
How severe is CVE-2019-5641?: Low severity. CVSS v3 base score is 3.3 out of 10.