CVE-2019-20047
PoC ×3—CVSS 3.1
7.5 high
EPSS
3%p85
Published
()
Modified
Description
An issue was discovered on Alcatel-Lucent OmniVista 4760 devices, and 8770 devices before 4.1.2. An incorrect web server configuration allows a remote unauthenticated attacker to retrieve the content of its own session files. Every session file contains the administrative LDAP credentials encoded in a reversible format. Sessions are stored in /sessions/sess_ .
- Vendors
- al-enterprise
- Products
- omnivista 4760, omnivista 8770
- Weakness
- CWE-522
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.