This issue was discovered during the penetration test. The service is available on public cloud service providers with the version prior to Oct-2022 release 1.
Impact: Unauthorized access to configuration data.
Attack vector: Unauthorized access to configuration data.
Secunia Advisory ID: SS19353 CVE: CVE-2019-2325 The Improper access control in mum_container_policy service prior to SMR Oct-2022 Release 1 allows allows unauthorized read of configuration data.This issue was discovered during the penetration test. The service is available on public cloud service providers with the version prior to Oct-2022 release 1.Impact: Unauthorized access to configuration data.Attack vector: Unauthorized access to configuration data.Secunia Advisory ID: SS19353 CVE: CVE-2019-2325 Exploitation: Remote Severity: Critical - CVSS Base Score: 8.8 Confidence: Medium - High Impact: System access allowed: By compromising the security of a running system, an attacker can access data that could lead to a variety of consequences, from identity theft and financial loss to physical threats like kidnapping or assault. Detection scenario: On cloud hosting service provider's platform, the service is enabled and version prior to Oct-2022 release 1 was discovered.
Vulnerability Scenario:
The service is available on public cloud service providers with the version prior to Oct-2022 release 1.
Impact: Unauthorized access to configuration data.
Attack vector: Unauthorized access to configuration data.
Secunia Advisory ID: SS19353 CVE: CVE-2019-2325 Exploitation: Remote Severity: Critical - CVSS Base Score: 8.8 Confidence: Medium - High Impact: System access allowed: By compromising the security of a running system, an attacker can access data that could lead to a variety of consequences, from identity theft and financial loss to physical threats like kidnapping or assault. Detection scenario: On cloud hosting service provider's platform, the service is enabled and version prior to Oct-2022 release 1 was discovered.
Timeline
Published on: 10/07/2022 15:15:00 UTC
Last modified on: 10/08/2022 13:09:00 UTC