CVE-2019-15087

An issue was discovered in PRiSE adAS 1.7.0. An authenticated user can change the function used to hash passwords to any function, leading to remote code execution.

CVSS v3.1 NVD

7.2 HIGHCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P

EPSS

3.33% chance of exploitation in the next 30 days, 88th percentile

Published

2019-09-20

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://security-garage.com/index.php/cves/from-open-redirect-to-rce-in-adas

Security advisories

• http://www.adas-sso.com/es/extra/download.php

References

• CVE Record
• NVD entry