CVE-2019-13033
—CVSS 3.1
3.3 low
EPSS
<1%p30
Published
()
Modified
Description
In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. This license can be used to upload data to a central Lynis server. Although no data can be extracted by knowing the license key, it may be possible to upload the data of additional scans.
- Vendors
- cisofydebianfedoraproject
- Products
- lynis, debian linux, fedora
- Weakness
- CWE-200
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.