CVE-2019-16071 - CVE House
Back to Database
Status published High CVE-2019-16071

Enigma NMS 65.0.0 and prior allows administrative users to create...

Vulnerability Description

Enigma NMS 65.0.0 and prior allows administrative users to create low-privileged accounts that do not have the ability to modify any settings in the system, only view the components. However, it is possible for a low-privileged user to perform all actions as an administrator by bypassing authorization controls and sending requests to the server in the context of an administrator.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-16071

Credits & Attribution

No credits recorded in the NVD database.

References

More from netsas

View All →
CVE-2019-16072
An OS command injection vulnerability in the discover_and_manage CGI script...
Critical 9.8
CVE-2019-16070
A number of stored Cross-site Scripting (XSS) vulnerabilities were identified...
Medium 6.1
CVE-2019-16069
A number of stored Cross-site Scripting (XSS) vulnerabilities were identified...
Medium 6.1
CVE-2019-16068
A CSRF vulnerability exists in NETSAS ENIGMA NMS version 65.0.0...
High 8.8
CVE-2019-16067
NETSAS Enigma NMS 65.0.0 and prior utilises basic authentication over...
High 7.5

Affected Vendor

Affected Software

enigma nms
Vulnerable Versions:
0

Timeline

Official Publish: March 19th, 2020
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.