medium5.3
CVE-2019-19837
Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote information disclosure of bin/web.conf via HTT…
Impact
Incorrect access control in the web interface in Ruckus Wireless Unleashed through 200.7.10.102.64 allows remote information disclosure of bin/web.conf via HTTP requests.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ruckuswireless | Unleashed | before 200.7.10.202.94 |
| Ruckuswireless | Zonedirector 1200 Firmware | before 9.10.2.0.84 from 9.12.0 before 9.12.3.0.136 from 9.13.0 before 10.0.1.0.90 from 10.1.0 before 10.1.2.0.275 from 10.2.0 before 10.2.1.0.147 from 10.3.0 before 10.3.1.0.21 |
References
- NVD record
- CVE.org record
- https://alephsecurity.com/2020/01/14/ruckus-wireless
- https://fahrplan.events.ccc.de/congress/2019/Fahrplan/events/10816.html
- https://www.ruckuswireless.com/security/299/view/txt
- https://alephsecurity.com/2020/01/14/ruckus-wireless
- https://fahrplan.events.ccc.de/congress/2019/Fahrplan/events/10816.html
- https://www.ruckuswireless.com/security/299/view/txt