CVE-2019-0179

MediumCVSS 4.4/10Last modified Jun 17, 2026

Description

Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information disclosure via local access.

Metrics

CVSS 3.1 4.4/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-522

Affected software

No affected versions have been published.

Timeline

Published: Jun 13, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-01804.4Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01816.7Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01823.3Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01833.3Insufficient password protection in the attestation database for Open CIT may allow an authenticated user to potentially enable information CVE-2019-01845.5Insufficient access control in protected memory subsystem for Intel(R) TXT for 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor CVE-2019-01855.5Insufficient access control in protected memory subsystem for SMM for 6th, 7th, 8th and 9th Generation Intel(R) Core(TM) Processor families;CVE-2019-01866.1The input fields of the Apache Pluto "Chat Room" demo portlet 3.0.0 and 3.0.1 are vulnerable to Cross-Site Scripting (XSS) attacks. Mitigati CVE-2019-01879.8Unauthenticated RCE is possible when JMeter is used in distributed mode (-r or -R command line options). Attacker can establish a RMI connec CVE-2019-01887.5Apache Camel prior to 2.24.0 contains an XML external entity injection (XXE) vulnerability (CWE-611) due to using an outdated vulnerable JSO CVE-2019-01899.8The java.io.ObjectInputStream is known to cause Java serialisation issues. This issue here is exposed by the "webtools/control/httpService" CVE-2019-01907.5A bug exists in the way mod_ssl handled client renegotiations. A remote attacker could send a carefully crafted request that would cause mod CVE-2019-01916.5Apache Karaf kar deployer reads .kar archives and extracts the paths from the "repository/" and "resources/" entries in the zip file. It the