ID CVE-2019-15136
Summary The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, which can lead to policy bypass for a secure Data Distribution Service (DDS) partition.
References
Vulnerable Configurations
  • cpe:2.3:a:eprosima:fast-rtps:0.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:0.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:0.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:0.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:0.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:0.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:0.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:0.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:0.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:0.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:0.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:0.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.0.0:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.0.0:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.0.6:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.0.6:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.1.0:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.1.0:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.2.0:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.2.0:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.3.0:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.3.0:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.3.1:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.3.1:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.4.0:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.4.0:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.6.0:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.6.0:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.8.0-2:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.8.0-2:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.9.0:-:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.9.0:-:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.9.0:beta:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.9.0:beta:*:*:*:*:*:*
  • cpe:2.3:a:eprosima:fast-rtps:1.9.0:beta2:*:*:*:*:*:*
    cpe:2.3:a:eprosima:fast-rtps:1.9.0:beta2:*:*:*:*:*:*
CVSS
Base: 5.0 (as of 24-08-2020 - 17:37)
Impact:
Exploitability:
CWE CWE-862
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL NONE
cvss-vector via4 AV:N/AC:L/Au:N/C:N/I:P/A:N
refmap via4
misc
Last major update 24-08-2020 - 17:37
Published 18-08-2019 - 16:15
Last modified 24-08-2020 - 17:37
Back to Top