CVE-2019-11393

An issue was discovered in /admin/users/update in M/Monit before 3.7.3. It allows unprivileged users to escalate their privileges to an administrator by requesting a password change and specifying the admin parameter.

CVSS v3.0

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

2.09% chance of exploitation in the next 30 days, 80th percentile

Published

2019-04-21

Updated

2024-08-04

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/46404

References

• CVE Record
• NVD entry

Related

• CVE-2019-11384
• CVE-2019-11395
• CVE-2019-11383
• CVE-2019-11398
• CVE-2019-11377
• CVE-2019-11401