CVE-2019-19096

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2019-19096
The Redis data structure component used in ABB eSOMS versions 6.0 to 6.0.2 stores credentials in clear text. If an attacker has file system access, this can potentially compromise the credentials' confidentiality.

6.1 /10

CVSS v3.0 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 4.2

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

3.6 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:P/I:P/A:N

Exploitability : 3.9 / Impact : 4.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
https://search.abb.com/library/Download.aspx?DocumentID=9AKK107492A9964&LanguageCode=en&DocumentPartId=&Action=Launch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:hitachienergy:esoms:*:*:*:*:*:*:*:*
History

16 May 2023, 20:21

Type Values Removed Values Added
First Time Hitachienergy esoms
Hitachienergy
CPE cpe:2.3:a:abb:esoms:*:*:*:*:*:*:*:* cpe:2.3:a:hitachienergy:esoms:*:*:*:*:*:*:*:*
Information

Published : 2020-04-02 20:15

Updated : 2023-05-16 20:21

NVD link : CVE-2019-19096

Mitre link : CVE-2019-19096

JSON object : View

Products Affected

hitachienergy

  • esoms
CWE
CWE-522

Insufficiently Protected Credentials