CVE-2019-5643CWE-284

C4G BLIS Improper Access Control

Medium · published November 6, 2019

CVSS v3.1
5.3
EPSS
1%
Percentile
59.4
In the wild
Unconfirmed
What it is

Computing For Good's Basic Laboratory Information System (also known as C4G BLIS) version 3.5 and earlier suffers from an instance of CWE-284, "Improper Access Control." As a result, an unauthenticated user may enumerate the user names and facility names in use on a particular installation.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00902 · 59.4th percentile
Weakness
CWE-284 · Improper Access Control
Published
2019-11-06T18:30Z
EPSS history
Timeline
  • 06 NOV 18:30Z
    C4G BLIS Improper Access Control
    cvelistv5