Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5.3
CVSSv3

CVE-2019-16516

Published: 23/01/2020 Updated: 20/02/2022
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Subscribe to Connectwise

Vulnerability Summary

An issue exists in ConnectWise Control (formerly known as ScreenConnect) 19.3.25270.7185. There is a user enumeration vulnerability, allowing an unauthenticated malicious user to determine with certainty if an account exists for a given username.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

connectwise control

connectwise control 19.3.25270.7185

Github Repositories

https://github.com/czz/ScreenConnect-UserEnum

ConnectWise also known as ScreenConnect CVE-2019-16516

ScreenConnect-UserEnum ConnectWise also known as ScreenConnect has a userenum vulnerability This is an user enumeration tool for that CVE-2019-16516 vulnerable <= 19224707 ??? didn't really understand if they fixed in upper version docsconnectwisecom/ConnectWise_Control_Documentation/ConnectWise_Control_release_notes/Release_notes_archive#ConnectWise_Co

References

CWE-203https://know.bishopfox.com/advisorieshttps://www.crn.com/slide-shows/managed-services/connectwise-control-attack-chain-exploit-20-questions-for-security-researcher-bishop-foxhttps://know.bishopfox.com/advisories/connectwise-controlhttps://www.crn.com/news/managed-services/connectwise-control-msp-security-vulnerabilities-are-severe-bishop-foxhttps://blog.huntresslabs.com/validating-the-bishop-fox-findings-in-connectwise-control-9155eec36a34http://packetstormsecurity.com/files/165432/ConnectWise-Control-19.2.24707-Username-Enumeration.htmlhttps://nvd.nist.govhttps://github.com/czz/ScreenConnect-UserEnum
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-22460CVE-2024-4646CVE-2024-29212IMAPCVE-2023-36672CVE-2024-34547command injectionCVE-2024-4651stored XSS
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook