VULNERABILITY INTELLIGENCE

CVE-2019-1010283

CVSS score7.5 HIGH

EPSS probability1.45%

CISA KEVNot currently listed

Published2019-07-17

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

Univention Corporate Server univention-directory-notifier 12.0.1-3 and earlier is affected by: CWE-213: Intentional Information Exposure. The impact is: Loss of Confidentiality. The component is: function data_on_connection() in src/callback.c. The attack vector is: network connectivity. The fixed version is: 12.0.1-4 and later.

Weakness classification

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CWE-213: Exposure of Sensitive Information Due to Incompatible Policies

Primary references

josh@bress.net — Exploit, Issue Tracking, Vendor Advisory
josh@bress.net — Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Issue Tracking, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory