CVE-2019-10046

MediumCVSS 5.3/10Last modified Jun 17, 2026

Description

An unauthenticated attacker can obtain information about the Pydio 8.2.2 configuration including session timeout, libraries, and license information.

Metrics

CVSS 3.0 5.3/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-306

Affected software

No affected versions have been published.

Timeline

Published
May 31, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-100475.4A stored XSS vulnerability exists in the web application of Pydio through 8.2.2 that can be exploited by levering the file upload and file pCVE-2019-100487.2The ImageMagick plugin that is installed by default in Pydio through 8.2.2 does not perform the appropriate validation and sanitization of uCVE-2019-100497.3It is possible for an attacker with regular user access to the web application of Pydio through 8.2.2 to trick an administrator user into opCVE-2019-10057.5A remote code execution vulnerability exists in the way the scripting engine handles objects in memory in Microsoft browsers. The vulnerabilCVE-2019-100507.5A buffer over-read issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the decode-mpls.c function DecodeMPLS is composed onCVE-2019-100517.5An issue was discovered in Suricata 4.1.3. If the function filetracker_newchunk encounters an unsafe "Some(sfcm) => { ft.new_chunk }" item, CVE-2019-100527.5An issue was discovered in Suricata 4.1.3. If the network packet does not have the right length, the parser tries to access a part of a DHCPCVE-2019-100539.8An issue was discovered in Suricata 4.1.x before 4.1.4. If the input of the function SSHParseBanner is composed only of a \n character, thenCVE-2019-100547.5An issue was discovered in Suricata 4.1.3. The function process_reply_record_v3 lacks a check for the length of reply.data. It causes an invCVE-2019-100557.5An issue was discovered in Suricata 4.1.3. The function ftp_pasv_response lacks a check for the length of part1 and part2, leading to a crasCVE-2019-100567.5An issue was discovered in Suricata 4.1.3. The code mishandles the case of sending a network packet with the right type, such that the functCVE-2019-100576.5Various Lexmark products have CSRF.
CVE-2019-10046: Medium severity, CVSS 5.3 | Vulnix