CVE-2019-11641 - Anomali Agave (formerly Drupot) through 1.0.0 fails to avoid fingerprinting by including predictable data and minimal variation in size within HTML templates, giving attackers the ability to detect and avoid this system

Back Back to CVE browser

HIGH

Anomali Agave (formerly Drupot) through 1.0.0 fails to avoid fingerprinting by including predictable data and minimal variation in size within HTML templates, giving attackers the ability to detect and avoid this system

Published May 1, 2019

7.5

HIGH

CVSS 3.0

EPSS 1.34%

Description

Anomali Agave (formerly Drupot) through 1.0.0 fails to avoid fingerprinting by including predictable data and minimal variation in size within HTML templates, giving attackers the ability to detect and avoid this system.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-330

Insufficient Randomness

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3311
Advisory
https://github.com/threatstream/agave/issues/1
x_refsource_MISCIssue TrackingThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-3311		Advisory
https://github.com/threatstream/agave/issues/1		x_refsource_MISCIssue TrackingThird Party Advisory