Access Control Vulnerability in PRTG Monitoring Software by Paessler

CVE-2019-19119

What is CVE-2019-19119?

A significant security flaw exists in PRTG Network Monitor versions 7.x through 19.4.53, which stems from inadequate access control on local registry keys associated with the Core Server Service. This oversight allows non-administrative users on the local machine to gain unauthorized access to administrative credentials, potentially leading to unauthorized control over the monitoring software and sensitive data.

References