CVE-2019-11641

Anomali Agave (formerly Drupot) through 1.0.0 fails to avoid fingerprinting by including predictable data and minimal variation in size within HTML templates, giving attackers the ability to detect and avoid this system.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2019-05-01

Last modified

2024-08-04

Weaknesses

CWE-330

Affected products

• Agave (Anomali)

References

• https://github.com/threatstream/agave/issues/1