high7.5Public exploit code
CVE-2019-9768
Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timestamp, which makes it easier for attackers…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Canarytokens 2019-03-01 - Detection Bypass2019-03-21 · dos · windows
Impact
Thinkst Canarytokens through commit hash 4e89ee0 (2019-03-01) relies on limited variation in size, metadata, and timestamp, which makes it easier for attackers to estimate whether a Word document contains a token.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thinkst | Canarytokens | through 2019-03-01 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/152182/Canarytokens-2019-03-01-Detection-Bypass.html
- https://github.com/thinkst/canarytokens/issues/35
- https://www.exploit-db.com/exploits/46589/
- http://packetstormsecurity.com/files/152182/Canarytokens-2019-03-01-Detection-Bypass.html
- https://github.com/thinkst/canarytokens/issues/35
- https://www.exploit-db.com/exploits/46589/