CVE-2019-11642

A log poisoning vulnerability has been discovered in the OneShield Policy (Dragon Core) framework before 5.1.10. Authenticated remote adversaries can poison log files by entering malicious payloads in either headers or form elements. These payloads are then executed via a client side debugging console. This is predicated on the debugging console and Java Bean being made available to the deployed application.

• CWE-94

• http://seclists.org/fulldisclosure/2019/May/1Mailing List, Third Party Advisory
• https://oneshield.com/business-solutions/oneshield-pc-solutions/oneshield-policy/Product, Vendor Advisory
• http://seclists.org/fulldisclosure/2019/May/1Mailing List, Third Party Advisory
• https://oneshield.com/business-solutions/oneshield-pc-solutions/oneshield-policy/Product, Vendor Advisory

Published

May 8, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-11637An issue was discovered in GNU recutils 1.8. There is a NULL…
• CVE-2019-11638An issue was discovered in GNU recutils 1.8. There is a NULL…
• CVE-2019-11639An issue was discovered in GNU recutils 1.8. There is a stac…
• CVE-2019-1164An elevation of privilege vulnerability exists when the Wind…7.8
• CVE-2019-11640An issue was discovered in GNU recutils 1.8. There is a heap…
• CVE-2019-11641Anomali Agave (formerly Drupot) through 1.0.0 fails to avoid…
• CVE-2019-11643Persistent XSS has been found in the OneShield Policy (Drago…
• CVE-2019-11644In the F-Secure installer in F-Secure SAFE for Windows befor…
• CVE-2019-11646Remote unauthorized command execution and unauthorized discl…
• CVE-2019-11647A potential XSS exists in Self Service Password Reset, in Mi…
• CVE-2019-11648An information leakage exists in Micro Focus NetIQ Self Serv…
• CVE-2019-11649Cross-Site Scripting vulnerability in Micro Focus Fortify So…5.4