CVE-2019-12243

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Istio 1.1.x through 1.1.6 has Incorrect Access Control.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jun 5, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-122455.3SilverStripe through 4.3.3 has incorrect access control for protected files uploaded via Upload::loadIntoFile(). An attacker may be able to CVE-2019-122464.3SilverStripe through 4.3.3 allows a Denial of Service on flush and development URL tools.CVE-2019-122477.5QEMU 3.0.0 has an Integer Overflow because the qga/commands*.c files do not check the length of the argument list or the number of environmeCVE-2019-122484.3An issue was discovered in Open Ticket Request System (OTRS) 7.0.x through 7.0.7, Community Edition 6.0.x through 6.0.19, and Community EditCVE-2019-12257.5An information disclosure vulnerability exists when the Windows RDP server improperly discloses the contents of its memory. An attacker who CVE-2019-122506.1IdentityServer IdentityServer4 through 2.4 has stored XSS via the httpContext to the host/Extensions/RequestLoggerMiddleware.cs LogForErrorCCVE-2019-122518.8sadmin/ceditpost.php in UCMS 1.4.7 allows SQL Injection via the index.php?do=sadmin_ceditpost cvalue parameter.CVE-2019-122526.5In Zoho ManageEngine ServiceDesk Plus through 10.5, users with the lowest privileges (guest) can view an arbitrary post by appending its numCVE-2019-122536.5my little forum before 2.4.20 allows CSRF to delete posts, as demonstrated by mode=posting&delete_posting.CVE-2019-122549.8In multiple Tecson Tankspion and GOKs SmartBox 4 products the affected application doesn't properly restrict access to an endpoint that is rCVE-2019-122559.8Wind River VxWorks has a Buffer Overflow in the TCP component (issue 1 of 4). This is a IPNET security vulnerability: TCP Urgent Pointer = 0CVE-2019-122569.8Wind River VxWorks 6.9 and vx7 has a Buffer Overflow in the IPv4 component. There is an IPNET security vulnerability: Stack overflow in the
CVE-2019-12243: High severity, CVSS 7.5 | Vulnix