CVE-2019-3569CWE-552

HHVM, when used with FastCGI, would bind by default to all available interfaces

published June 26, 2019

CVSS
—
EPSS
1%
Percentile
73.9
In the wild
Unconfirmed
What it is

HHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could allow a malicious individual unintended direct access to the application, which could result in information disclosure. This issue affects versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.0, versions 3.30.5 and below, and all versions in the 4.0, 4.1, and 4.2 series.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01489 · 73.9th percentile
Weakness
CWE-552 · Files or Directories Accessible to External Parties
Published
2019-06-26T15:09Z
EPSS history
Timeline
  • 26 JUN 15:09Z
    HHVM, when used with FastCGI, would bind by default to all available interfaces
    cvelistv5