CVE-2019-12105

In Supervisor through 4.0.2, an unauthenticated user can read log files or restart a service. Note: The maintainer responded that the affected component, inet_http_server, is not enabled by default but if the user enables it and does not set a password, Supervisor logs a warning message. The maintainer indicated the ability to run an open server will not be removed but an additional warning was added to the documentation

• CWE-306

• http://supervisord.org/configuration.html#inet-http-server-section-settings
• https://github.com/Supervisor/supervisor/commit/4e334d9cf2a1daff685893e35e72398437df3dcbPatch, Third Party Advisory
• https://github.com/Supervisor/supervisor/issues/1245Third Party Advisory
• http://supervisord.org/configuration.html#inet-http-server-section-settings
• https://github.com/Supervisor/supervisor/commit/4e334d9cf2a1daff685893e35e72398437df3dcbPatch, Third Party Advisory
• https://github.com/Supervisor/supervisor/issues/1245Third Party Advisory

Published

Sep 10, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-12099In PHP-Fusion 9.03.00, edit_profile.php allows remote authen…
• CVE-2019-1210Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2019-12101coap_decode_option in coap.c in LibNyoci 0.07.00rc1 mishandl…
• CVE-2019-12102Kentico 11 through 12 lets attackers upload and explore file…
• CVE-2019-12103The web-based configuration interface of the TP-Link M7350 V…
• CVE-2019-12104The web-based configuration interface of the TP-Link M7350 V…
• CVE-2019-12106The updateDevice function in minissdpd.c in MiniUPnP MiniSSD…
• CVE-2019-12107The upnp_event_prepare function in upnpevents.c in MiniUPnP …
• CVE-2019-12108A Denial Of Service vulnerability in MiniUPnP MiniUPnPd thro…
• CVE-2019-12109A Denial Of Service vulnerability in MiniUPnP MiniUPnPd thro…
• CVE-2019-1211An elevation of privilege vulnerability exists in Git for Vi…
• CVE-2019-12110An AddPortMapping Denial Of Service vulnerability in MiniUPn…