CVE-2019-25021 - CVE House
Back to Database
Status published High CVE-2019-25021

An issue was discovered in Scytl sVote 2.1. Due to...

Vulnerability Description

An issue was discovered in Scytl sVote 2.1. Due to the implementation of the database manager, an attacker can access the OrientDB by providing admin as the admin password. A different password cannot be set because of the implementation in code.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-25021

Credits & Attribution

No credits recorded in the NVD database.

References

More from scytl

View All →
CVE-2019-25023
An issue was discovered in Scytl sVote 2.1. Because the...
Medium 6.5
CVE-2019-25022
An issue was discovered in Scytl sVote 2.1. An attacker...
Critical 9.8
CVE-2019-25020
An issue was discovered in Scytl sVote 2.1. Because the...
High 7.5

Affected Vendor

Affected Software

secure vote
Vulnerable Versions:
2.1

Timeline

Official Publish: February 27th, 2021
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.