VULNERABILITY INTELLIGENCE

CVE-2019-15087

CVSS score7.2 HIGH

EPSS probability3.33%

CISA KEVNot currently listed

Published2019-09-20

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

An issue was discovered in PRiSE adAS 1.7.0. An authenticated user can change the function used to hash passwords to any function, leading to remote code execution.

Weakness classification

nvd@nist.gov: CWE-94

Primary references

cve@mitre.org — Product
cve@mitre.org — Exploit, Patch, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108 — Product
af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Third Party Advisory