CVE-2019-15631

EUVD-2019-6587 · Published Dec 2, 2019

Remote Code Execution vulnerability in MuleSoft Mule CE/EE 3.x and API Gateway 2.x released before October 31, 2019 allows remote attackers to execute arbitrary code.

Technologies

Mulesoft Api GatewayMulesoft Mule Runtime

CVSS scores

v3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
v2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access

T1190Exploit Public-Facing Application

References

https://help.salesforce.com/articleView?id=000351827&language=en_US&type=1&mode=1

Potentially impacted assets

See if this affects your attack surface