VulnerabilityModified
CVE-2019-16062
It is possible for an attacker to expose unencrypted sensitive data.
MEDIUM 6.5EPSS 0.76%
Does this matter?
Lower severity and a low EPSS score (0.76%). Track it; it rarely justifies an emergency change on its own.
Description
NETSAS Enigma NMS 65.0.0 and prior does not encrypt sensitive data stored within the SQL database. It is possible for an attacker to expose unencrypted sensitive data.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.76% probability · 53th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-312
- Affected
- netsas/enigma network management solution
- Source
- cve@mitre.org
References
- https://www.mogozobo.com/?p=3647Exploit, Third Party Advisory
- https://www.mogozobo.com/?p=3647Exploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.