CVE-2019-19019

Published: Dec 2, 2019Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.6 / Impact: 5.9

Source: NVD

Description

An issue was discovered in TitanHQ WebTitan before 5.18. It contains a Remote Code Execution issue through which an attacker can execute arbitrary code as root. The issue stems from the hotfix download mechanism, which downloads a shell script via HTTP, and then executes it as root. This is analogous to CVE-2019-6800 but for a different product.

Affected (1)

Products: Titanhq: Webtitan

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Titanhq Webtitan	Before 5.18

Related CWEs

Origin Validation Error

The product does not properly verify that the source of data or communication is valid.

References (4)

https://write-up.github.io/webtitan/

Source: cve@mitre.org

ExploitThird Party Advisory

https://www.webtitan.com/resources/product-updates/

Source: cve@mitre.org

Release NotesVendor Advisory

https://write-up.github.io/webtitan/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

https://www.webtitan.com/resources/product-updates/

Source: af854a3a-2127-422b-91ae-364da2661108

Release NotesVendor Advisory

Timeline

No history available yet.