CVE-2019-19550

Published: Jan 31, 2020Modified: Jun 17, 2026

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

Remote Authentication Bypass in Senior Rubiweb 6.2.34.28 and 6.2.34.37 allows admin access to sensitive information of affected users using vulnerable versions. The attacker only needs to provide the correct URL.

Affected (2)

Products: Senior: Rubiweb

Senior

1 product

Rubiweb

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Senior Rubiweb	Version 6.2.34.28
Senior Rubiweb	Version 6.2.34.37

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (2)

https://github.com/underprotection/CVE-2019-19550/

Source: cve@mitre.org

ExploitThird Party Advisory

https://github.com/underprotection/CVE-2019-19550/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party Advisory

Timeline

No history available yet.