Vulnerability Description
An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/REGISTER.cmd (aka /osm_tiles/REGISTER.cmd) directly: it contains sensitive information about the database through the SQL queries within this batch file. This file exposes SQL database information such as database version, table name, column name, etc.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Kirona | Dynamic Resource Scheduling | 5.5.3.5 |
Related Weaknesses (CWE)
References
- http://packetstormsecurity.com/files/154838/Kirona-DRS-5.5.3.5-Information-DisclExploitThird Party AdvisoryVDB Entry
- https://github.com/Ramikan/Vulnerabilities/blob/master/Kirona-DRS%205.5.3.5%20MuExploitThird Party Advisory
- http://packetstormsecurity.com/files/154838/Kirona-DRS-5.5.3.5-Information-DisclExploitThird Party AdvisoryVDB Entry
- https://github.com/Ramikan/Vulnerabilities/blob/master/Kirona-DRS%205.5.3.5%20MuExploitThird Party Advisory
FAQ
What is CVE-2019-17503?
CVE-2019-17503 is a vulnerability with a CVSS score of 5.3 (MEDIUM). An issue was discovered in Kirona Dynamic Resource Scheduling (DRS) 5.5.3.5. An unauthenticated user can access /osm/REGISTER.cmd (aka /osm_tiles/REGISTER.cmd) directly: it contains sensitive informat...
How severe is CVE-2019-17503?
CVE-2019-17503 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2019-17503?
Check the references section above for vendor advisories and patch information. Affected products include: Kirona Dynamic Resource Scheduling.