cbcvebase.

Logonbox Nervepoint Access Manager vulnerabilities

1 known vulnerability affecting logonbox/nervepoint_access_manager.

Total CVEs
1
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2019-6716P2CRITICALCVSS 9.4PoCv1.2v1.3+1 more2019-03-21
CVE-2019-6716 [CRITICAL] CWE-639 CVE-2019-6716: An unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox Nervepoint Acc An unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to enumerate internal Active Directory usernames and group names, and alter back-end server jobs (backup and synchronization jobs), which could allow for the possibility of a Denial of Service att
nvd
Logonbox Nervepoint Access Manager vulnerabilities | cvebase