CVE-2019-19127

Related Files

SITS:Vision 9.7.0 Authentication Bypass

Posted Mar 25, 2020

Authored by Callum Murphy

An authentication bypass vulnerability is present in the stand-alone SITS:Vision component of Tribal SITS in its default configuration, related to unencrypted communications sent by the client each time it is launched. This vulnerability allows unauthenticated attackers to gain access to credentials or execute arbitrary SQL queries on the SITS backend as long as they have access to the client executable or can intercept traffic from a user who does. Version 9.7.0 is affected.

tags | advisory, arbitrary, bypass

advisories | CVE-2019-19127

SHA-256 | 72b6b1b2c50fcb2bd1a4f629d69aabd35faef658148a4bbb263c4cfcc2a47d7a

Download | Favorite | View