9.8crit
CVE-2019-25213
Advanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File Read
Published 2 y ago · modified 4 mo ago · JSON
CVSS
9.8
v3.1 · CNA
CISA KEV
No
not known exploited
EPSS
2.8%
percentile 86%
Public exploits
0
none known
Summary
The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to, and including, 5.9.8.1 due to insufficient validation on the aam-media parameter. This allows unauthenticated attackers to read any file on the server, including sensitive files such as wp-config.php
CISA SSVC assessment
- Exploitation
- none
- Automatable
- yes
- Technical impact
- total
- Assessed
- 2 y ago
Exploit prediction (EPSS)
2.77% probability of exploitation in the next 30 days, higher than 86% of all scored CVEs.
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CNA | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| CNA | 3.1 | 9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
| NVD | 3.1 | 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Affected products
- vasyltech Advanced Access Manager – Access Governance for WordPress
- advanced_access_manager_project advanced_access_manager
Classification
- Weakness
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
- wordfence.com /threat-intel/vulnerabilities/id/55e0f0df-7be2-4e18-988c-2cc558768eff?source=cve
- plugins.trac.wordpress.org /changeset/2098838/advanced-access-manager/trunk/application/Core/Media.php?old=2151316&ol
Sources
- CVE List: CVE-2019-25213
- NVD: CVE-2019-25213
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.