How severe is CVE-2019-16387?

This vulnerability has a severity rating of HIGH with a CVSS score of 8.1 out of 10.

What type of vulnerability is CVE-2019-16387?

This is classified as CWE-668, which is a common weakness in software security.

CVE-2019-16387 - HIGH Severity | CVSS 8.1

Vulnerability Description

PEGA Platform 8.3.0 is vulnerable to a direct prweb/sso/random_token/!STANDARD?pyActivity=Data-Admin-DB-Name.DBSchema_ListDatabases request while using a low-privilege account. (This can perform actions and retrieve data that only an administrator should have access to.) NOTE: The vendor states that this vulnerability was discovered using an administrator account and they are normal administrator functions. Therefore, the claim that the CVE was done with a low privilege account is incorrect

Related Vulnerabilities

CVE-2018-1840

HIGH

CVSS:8.1(High)

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system, caused when a security domain is configured to use a federated repository other th...

CWE-6682018

CVE-2020-25039

HIGH

CVSS:8.1(High)

Sylabs Singularity 3.2.0 through 3.6.2 has Insecure Permissions on temporary directories used in fakeroot or user namespace container execution.

CWE-6682020

CVE-2020-5386

HIGH

CVSS:8.1(High)

Dell EMC ECS, versions prior to 3.5, contains an Exposure of Resource vulnerability. A remote unauthenticated attacker can access the list of DT (Directory Table) objects of all internally running ser...

CWE-6682020

CVE-2022-22515

HIGH

CVSS:8.1(High)

A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration file(s) of the affected ...

CWE-6682022

CVE-2022-23835

HIGH

CVSS:8.1(High)

The Visual Voice Mail (VVM) application through 2022-02-24 for Android allows persistent access if an attacker temporarily controls an application that has the READ_SMS permission, and reads an IMAP c...

CWE-6682022

CVE-2022-38813

HIGH

CVSS:8.1(High)

PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group,...

CWE-6682022