CVE-2019-19017

An issue was discovered in TitanHQ WebTitan before 5.18. The appliance has a hard-coded root password set during installation. An attacker could utilize this to gain root privileges on the system.

CVSS v3.1

8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

1.12% chance of exploitation in the next 30 days, 64th percentile

Published

2019-12-02

Updated

2024-08-05

Proof-of-concept exploits (1)

• https://write-up.github.io/webtitan/

References

• CVE Record
• NVD entry

Related

• CVE-2019-19016
• CVE-2019-19018
• CVE-2019-19015
• CVE-2019-19019
• CVE-2019-19014
• CVE-2019-19020