CVE-2019-17503

PoC ×2—

CVSS 3.1

5.3 medium

EPSS

48%p99

Published

Oct 11, 2019 (Oct 11, 2019)

Modified

Jun 17, 2026

Description

An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/REGISTER.cmd (aka /osm_tiles/REGISTER.cmd) directly: it contains sensitive information about the database through the SQL queries within this batch file. This file exposes SQL database information such as database version, table name, column name, etc.

Vendors: kirona
Products: dynamic resource scheduling
Weakness: CWE-425
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (48.3%)

In the news0 stories

No ingested article mentions this CVE yet.