CVE-2019-13033

In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed

published June 18, 2020

CVSS
—
EPSS
0%
Percentile
29.2
In the wild
Unconfirmed
What it is

In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. This license can be used to upload data to a central Lynis server. Although no data can be extracted by knowing the license key, it may be possible to upload the data of additional scans.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00365 · 29.2th percentile
Published
2020-06-18T17:30Z
EPSS history
Timeline
  • 18 JUN 17:30Z
    In CISOfy Lynis 2.x through 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed
    cvelistv5