CVE-2019-15088 - An issue was discovered in PRiSE adAS 1.7.0

Back Back to CVE browser

CRITICAL

An issue was discovered in PRiSE adAS 1.7.0

Published Sep 20, 2019

9.8

CRITICAL

CVSS 3.1

EPSS 1.72%

Description

An issue was discovered in PRiSE adAS 1.7.0. Password hashes are compared using the equality operator. Thus, under specific circumstances, it is possible to bypass login authentication.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

http://www.adas-sso.com/es/extra/download.php
x_refsource_MISCProduct
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6166
Advisory
https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas
x_refsource_MISCPatchThird Party Advisory

Link	Providers	Tags
http://www.adas-sso.com/es/extra/download.php		x_refsource_MISCProduct
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6166		Advisory
https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas		x_refsource_MISCPatchThird Party Advisory