CVE-2019-7178

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

Pexip Infinity before 20.1 allows privilege escalation by restoring a system backup.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Sep 25, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2019

CVE-2019-71817.5Buffer Overflow vulnerability in myQNAPcloud Connect 1.3.3.0925 and earlier could allow remote attackers to crash the program.CVE-2019-71839.8This improper link resolution vulnerability allows remote attackers to access system files. To fix this vulnerability, QNAP recommend updatiCVE-2019-71844.8This cross-site scripting (XSS) vulnerability in Video Station allows remote attackers to inject and execute scripts on the administrator’s CVE-2019-71854.8This cross-site scripting (XSS) vulnerability in Music Station allows remote attackers to inject and execute scripts on the administrator’s CVE-2019-71929.8This improper access control vulnerability allows remote attackers to gain unauthorized access to the system. To fix these vulnerabilities, CVE-2019-71939.8This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP CVE-2019-71949.8This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability,CVE-2019-71959.8This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability,CVE-2019-71974.8A stored cross-site scripting (XSS) vulnerability has been reported to affect multiple versions of QTS. If exploited, this vulnerability mayCVE-2019-71989.8This command injection vulnerability allows attackers to execute arbitrary commands in a compromised application. QNAP have already fixed thCVE-2019-72017.8An unquoted service path vulnerability is reported to affect the service QVssService in QNAP NetBak Replicator. This vulnerability could allCVE-2019-72116.1SmarterTools SmarterMail 16.x before build 6995 has stored XSS. JavaScript code could be executed on the application by opening a malicious
CVE-2019-7178: High severity, CVSS 7.2 | Vulnix