1. Home
  2. CVE Database
  3. CVE-2019-16071
HIGH · 8.8

CVE-2019-16071

Enigma NMS 65.0.0 and prior allows administrative users to create low-privileged accounts that do not have the ability to modify any settings in the system, only view the components. However, it is po...

Vulnerability Description

Enigma NMS 65.0.0 and prior allows administrative users to create low-privileged accounts that do not have the ability to modify any settings in the system, only view the components. However, it is possible for a low-privileged user to perform all actions as an administrator by bypassing authorization controls and sending requests to the server in the context of an administrator.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
NetsasEnigma Nms<= 65.0.0

Related Weaknesses (CWE)

CWE-269

References

FAQ

What is CVE-2019-16071?

CVE-2019-16071 is a vulnerability with a CVSS score of 8.8 (HIGH). Enigma NMS 65.0.0 and prior allows administrative users to create low-privileged accounts that do not have the ability to modify any settings in the system, only view the components. However, it is po...

How severe is CVE-2019-16071?

CVE-2019-16071 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-16071?

Check the references section above for vendor advisories and patch information. Affected products include: Netsas Enigma Nms.