CVE-2019-17662

CRITICO 9.8CVE-2019-17662 · Published 16/10/2019 · updated 17/06/2026

In breve

CVE-2019-17662 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda thinvnc (cybelsoft).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 96.8%, superiore al 99.9% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
thinvnc cybelsoft	`= 1.0`	No fix yet

Description

ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a ../../ThinVnc.ini directory traversal attack vector.

References

packetstormsecurity.com/files/154896/ThinVNC-1.0b1-Authentication-Bypass.html · Exploit
bewest/thinvnc · Third Party Advisory
shashankmangal2/Exploits · Broken Link
redteamzone.com/ThinVNC · Exploit

Altre vulnerabilità di thinvnc

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free