CVE-2019-11816

Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges…

published May 20, 2019

CVSS
—
EPSS
3%
Percentile
88.1
In the wild
Unconfirmed
What it is

Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03212 · 88.1th percentile
Published
2019-05-20T21:26Z
EPSS history
Timeline
  • 20 MAY 21:26Z
    Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges…
    cvelistv5