VULNERABILITY INTELLIGENCE
CVE-2019-11641
CVSS score7.5 HIGH
EPSS probability1.34%
CISA KEVNot currently listed
Published2019-05-01
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Description
Anomali Agave (formerly Drupot) through 1.0.0 fails to avoid fingerprinting by including predictable data and minimal variation in size within HTML templates, giving attackers the ability to detect and avoid this system.
Weakness classification
- CWE-330: Use of Insufficiently Random Values
Primary references
- cve@mitre.org — Issue Tracking, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Issue Tracking, Third Party Advisory