CVE-2019-20569
published 2020-03-24CVE-2019-20569: An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via the status bar. The Samsung ID…
PriorityP422medium6.2CVSS 3.1
AVLACLPRNUINSUCNIHAN
EPSS
0.13%
3.3th percentile
An issue was discovered on Samsung mobile devices with P(9.0) software. Attackers can bypass Factory Reset Protection (FRP) via the status bar. The Samsung ID is SVE-2019-15089 (September 2019).
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | — | — |
CVSS provenance
nvdv3.16.2MEDIUMCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
nvdv2.02.1LOWAV:L/AC:L/Au:N/C:N/I:P/A:N
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
Nuclei
Grafana - Improper Access Control
nuclei·CVSS 7.5
CVE-2019-15043 [HIGH] Grafana - Improper Access Control
Grafana - Improper Access Control
Grafana 2.x through 6.x before 6.3.4 is susceptible to improper access control. An attacker can delete and create arbitrary snapshots, leading to denial of service.
Template:
id: CVE-2019-15043
info:
name: Grafana - Improper Access Control
author: Joshua Rogers
severity: high
description: |
Grafana 2.x through 6.x before 6.3.4 is susceptible to improper access control. An attacker can delete and create arbitrary snapshots, leading to denial of service.
impact: |
Successful exploitation of this vulnerability could allow an attacker to gain unauthorized access to sensitive information or perform unauthorized actions.
remediation: Upgrade to 6.3.4 or higher.
reference:
- https://community.grafana.com/t/grafana-5-4-5-and-6-3-4-security-update/20569
- https
No writeups or analysis indexed.
2020-03-24
Published