Vulnerability Description
Anomali Agave (formerly Drupot) through 1.0.0 fails to avoid fingerprinting by including predictable data and minimal variation in size within HTML templates, giving attackers the ability to detect and avoid this system.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Anomali | Agave | <= 1.0.0 |
Related Weaknesses (CWE)
References
- https://github.com/threatstream/agave/issues/1Issue TrackingThird Party Advisory
- https://github.com/threatstream/agave/issues/1Issue TrackingThird Party Advisory
FAQ
What is CVE-2019-11641?
CVE-2019-11641 is a vulnerability with a CVSS score of 7.5 (HIGH). Anomali Agave (formerly Drupot) through 1.0.0 fails to avoid fingerprinting by including predictable data and minimal variation in size within HTML templates, giving attackers the ability to detect an...
How severe is CVE-2019-11641?
CVE-2019-11641 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-11641?
Check the references section above for vendor advisories and patch information. Affected products include: Anomali Agave.