CVE-2019-16872

CriticalCVSS 9.9/10Last modified Jun 17, 2026

Description

Portainer before 1.22.1 has Incorrect Access Control (issue 1 of 4).

Metrics

CVSS 3.1 9.9/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published
Nov 7, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-168735.4Portainer before 1.22.1 has XSS (issue 1 of 2).CVE-2019-168746.5Portainer before 1.22.1 has Incorrect Access Control (issue 2 of 4).CVE-2019-168767.5Portainer before 1.22.1 allows Directory Traversal.CVE-2019-168778.8Portainer before 1.22.1 has Incorrect Access Control (issue 4 of 4).CVE-2019-168785.4Portainer before 1.22.1 has XSS (issue 2 of 2).CVE-2019-168799.8The Synergy Systems & Solutions (SSS) HUSKY RTU 6049-E70, with firmware Versions 5.0 and prior, has a Missing Authentication for Critical FuCVE-2019-16887.1A vulnerability in the management web interface of Cisco Network Assurance Engine (NAE) could allow an unauthenticated, local attacker to gaCVE-2019-168809.8An issue was discovered in the linea crate through 0.9.4 for Rust. There is double free in the Matrix::zip_elements method.CVE-2019-168819.8An issue was discovered in the portaudio-rs crate through 0.3.1 for Rust. There is a use-after-free with resultant arbitrary code execution CVE-2019-168827.5An issue was discovered in the string-interner crate before 0.7.1 for Rust. It allows attackers to read from memory locations associated witCVE-2019-168847.5runc through 1.0.0-rc8, as used in Docker through 19.03.2-ce and other products, allows AppArmor restriction bypass because libcontainer/rooCVE-2019-168859.8In OkayCMS through 2.3.4, an unauthenticated attacker can achieve remote code execution by injecting a malicious PHP object via a crafted co
CVE-2019-16872: Critical severity, CVSS 9.9 | Vulnix