How severe is CVE-2019-16003?

This vulnerability has a severity rating of MEDIUM with a CVSS score of 4.3 out of 10.

What type of vulnerability is CVE-2019-16003?

This is classified as CWE-306, which is a common weakness in software security.

CVE-2019-16003 - MEDIUM Severity | CVSS 4.3

Vulnerability Description

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to download system log files from an affected device. The vulnerability is due to an issue in the authentication logic of the web-based management interface. An attacker could exploit this vulnerability by sending a crafted request to the web interface. A successful exploit could allow the attacker to download log files if they were previously generated by an administrator.

Related Vulnerabilities

CVE-2016-6549

MEDIUM

CVSS:4.3(Medium)

The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute.

CWE-3062016

CVE-2019-15282

MEDIUM

CVSS:4.3(Medium)

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker read tcpdump files generated on an affected devic...

CWE-3062019

CVE-2020-0052

MEDIUM

CVSS:4.3(Medium)

In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. This could lead to local escalation of privilege on the lock screen with no addit...

CWE-3062020

CVE-2020-26173

MEDIUM

CVSS:4.3(Medium)

An incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an attacker to download documents (PDF) by providing a valid document ID and token. No further authenticatio...

CWE-3062020

CVE-2022-21691

MEDIUM

CVSS:4.3(Medium)

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions chat participants can spoof their...

CWE-3062022

CVE-2022-29270

MEDIUM

CVSS:4.3(Medium)

In Nagios XI through 5.8.5, it is possible for a user without password verification to change his e-mail address.

CWE-3062022