CVE-2019-19014

Published: Dec 2, 2019Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

An issue was discovered in TitanHQ WebTitan before 5.18. It has a sudoers file that enables low-privilege users to execute a vast number of commands as root, including mv, chown, and chmod. This can be trivially exploited to gain root privileges by an attacker with access.

Affected (1)

Products: Titanhq: Webtitan

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Titanhq Webtitan	Before 5.18

Related CWEs

Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

References (4)

https://write-up.github.io/webtitan/

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.webtitan.com/resources/product-updates/

Source: cve@mitre.org

Release NotesVendor Advisory

https://write-up.github.io/webtitan/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.webtitan.com/resources/product-updates/

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.