First day on Intigriti: our agent harness found and proved a remote code execution bug, paid €3,000.

CVE-2019-8996

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In Signiant Manager+Agents before 13.5, the implementation of the set command has a Buffer Overflow.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://help.signiant.com/flight-deck/general/release-notes-13-5Release Notes, Vendor Advisory
https://help.signiant.com/manager-agents/installation/release-notes/Release Notes, Vendor Advisory
https://help.signiant.com/flight-deck/general/release-notes-13-5Release Notes, Vendor Advisory
https://help.signiant.com/manager-agents/installation/release-notes/Release Notes, Vendor Advisory

Timeline

Published: Feb 21, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-89975.9An XML External Entity Injection (XXE) vulnerability in the Management System (console) of BlackBerry AtHoc versions earlier than 7.6 HF-567 CVE-2019-89987.8An information disclosure vulnerability leading to a potential local escalation of privilege in the procfs service (the /proc filesystem) of CVE-2019-89997.5An XML External Entity vulnerability in the UEM Core of BlackBerry UEM version(s) earlier than 12.10.1a could allow an attacker to potential CVE-2019-90029.8An issue was discovered in Tiny Issue 1.3.1 and pixeline Bugs through 1.3.2c. install/config-setup.php allows remote attackers to execute ar CVE-2019-90037.5In the Linux kernel before 4.20.5, attackers can trigger a drivers/char/ipmi/ipmi_msghandler.c use-after-free and OOPS by arranging for cert CVE-2019-90047.5In Eclipse Wakaama (formerly liblwm2m) 1.0, core/er-coap-13/er-coap-13.c in lwm2mserver in the LWM2M server mishandles invalid options, lead CVE-2019-90056.5The Cprime Power Scripts app before 4.0.14 for Atlassian Jira allows Directory Traversal.CVE-2019-90088.8An issue was discovered in 3S-Smart CODESYS V3 through 3.5.12.30. A user with low privileges can take full control over the runtime.CVE-2019-90097.5An issue was discovered in 3S-Smart CODESYS before 3.5.15.0 . Crafted network packets cause the Control Runtime to crash.CVE-2019-90109.8An issue was discovered in 3S-Smart CODESYS V3 products. The CODESYS Gateway does not correctly verify the ownership of a communication chan CVE-2019-90115.3In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), an attacker can identify valid usernames.CVE-2019-90127.5An issue was discovered in 3S-Smart CODESYS V3 products. A crafted communication request may cause uncontrolled memory allocations in the af