VULNERABILITY INTELLIGENCE

CVE-2019-11196

CVSS score9.8 CRITICAL
EPSS probability6.27%
CISA KEVNot currently listed
Published2019-04-12
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An authentication bypass vulnerability in all versions of ValuePLUS Integrated University Management System (IUMS) allows unauthenticated, remote attackers to gain administrator privileges via the Teachers Web Panel (TWP) User ID or Password field. If exploited, the attackers could perform any actions with administrator privileges (e.g., enumerate/delete all the students' personal information or modify various settings).

Weakness classification

  • nvd@nist.gov: CWE-89

Primary references