CVE-2019-17662
60Vexday Risk Score
Corrija em breve. Ela tem exploit funcional público.
ssvc Attendepss 97%
da publicação à arma1 dias
Publicada no NVD16 de out.
1ª PoC+1d
metasploit16 de out.
probabilidade de exploração
97%top 1% das CVEs
exploração observada
nãonenhuma fonte reporta
9 exploit(s) público(s)
ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a ../../ThinVnc.ini directory traversal attack vector.
Produtos afetados
n/a · n/aPoCs públicas encontradas — 9✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/47519githubgithub.com/MuirlandOracle/CVE-2019-17662★ 19githubgithub.com/bl4ck574r/CVE-2019-17662★ 2githubgithub.com/whokilleddb/CVE-2019-17662★ 2githubgithub.com/rajendrakumaryadav/CVE-2019-17662-Exploit★ 1githubgithub.com/kxisxr/Bash-Script-CVE-2019-17662★ 1githubgithub.com/thomas-osgood/CVE-2019-17662★ 1githubgithub.com/Tamagaft/CVE-2019-17662★ 0cve_referencepacketstormsecurity.com/files/154896/ThinVNC-1.0b1-Authentication-Bypass.htmlnão verificado⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.