CVE-2019-11641

EUVD-2019-3311 · Published May 1, 2019

Anomali Agave (formerly Drupot) through 1.0.0 fails to avoid fingerprinting by including predictable data and minimal variation in size within HTML templates, giving attackers the ability to detect and avoid this system.

Technologies

Anomali Agave

Weaknesses

CWE-330

CVSS scores

v3.07.5CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
v2.05.0AV:N/AC:L/Au:N/C:P/I:N/A:N

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Credential Access

T1190Exploit Public-Facing Application T1110Brute Force T1552.004Private Keys

References

https://github.com/threatstream/agave/issues/1

Potentially impacted assets

See if this affects your attack surface