CVEvulnerability

CVE-2019-11641

7.5 HIGH Published 2019-05-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-05-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
CWE-330

Description

Anomali Agave (formerly Drupot) through 1.0.0 fails to avoid fingerprinting by including predictable data and minimal variation in size within HTML templates, giving attackers the ability to detect and avoid this system.

Affected configurations

• anomali agave (<= 1.0.0)

Related

Weakness · CWE (1)

  • CWE-330 Use of Insufficiently Random Values weakness

References