CVE-2019-5641
Rapid7 InsightVM Information Disclosure after Logout
Vexday Risk Score
8Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 3.3EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
21 Sep 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Rapid7 InsightVM suffers from an information exposure issue whereby, when the user's session has ended due to inactivity, an attacker can use the Inspect Element browser feature to remove the login panel and view the details available in the last webpage visited by previous user
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
Rapid7 · InsightVMWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →