Cross-Site Request Forgery in Veeam ONE Reporter by Veeam
CVE-2019-11569

8.8HIGH

Key Information:

Vendor

Veeam
Status
One Reporter
Vendor
CVE Published:
6 May 2019

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2019-11569?

Veeam ONE Reporter version 9.5.0.3201 is susceptible to Cross-Site Request Forgery (CSRF) attacks, which could enable an attacker to perform unauthorized actions on behalf of an authenticated user. This vulnerability could potentially compromise the security of the affected systems if exploited, highlighting the need for updated protections against such attacks. Security measures should be implemented to mitigate risks associated with CSRF vulnerabilities.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2019-11569 - Proof of Concept

References

https://www.exploit-db.com/exploits/46765
exploitx_refsource_EXPLOIT-DB

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.