CVE-2019-19119 - An issue was discovered in PRTG 7.x through 19.4.53

Back Back to CVE browser

MEDIUM

An issue was discovered in PRTG 7.x through 19.4.53

Published Feb 3, 2020

5.5

MEDIUM

CVSS 3.1

EPSS 0.27%

Description

An issue was discovered in PRTG 7.x through 19.4.53. Due to insufficient access control on local registry keys for the Core Server Service, a non-administrative user on the local machine is able to access administrative credentials.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-522

Insufficiently Protected Credentials

References (5)

https://blog.paessler.com
x_refsource_MISCVendor Advisory
https://blog.paessler.com/prtg-release-19.4.54-includes-2-brand-new-sensors-for-disk-and-storage
x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8752
Advisory
https://www.paessler.com/prtg/history/preview
x_refsource_MISCVendor Advisory
https://www.ptsecurity.com/ww-en/about/news/positive-technologies-helps-in-eliminating-vulnerability-in-software-for-monitoring-visualizing-and-controlling-conditions-of-it-infrastructure/
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://blog.paessler.com		x_refsource_MISCVendor Advisory
https://blog.paessler.com/prtg-release-19.4.54-includes-2-brand-new-sensors-for-disk-and-storage		x_refsource_MISCVendor Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-8752		Advisory
https://www.paessler.com/prtg/history/preview		x_refsource_MISCVendor Advisory
https://www.ptsecurity.com/ww-en/about/news/positive-technologies-helps-in-eliminating-vulnerability-in-software-for-monitoring-visualizing-and-controlling-conditions-of-it-infrastructure/		x_refsource_MISCThird Party Advisory