CVE-2019-16133

An issue was discovered in eteams OA v4.0.34. Because the session is not strictly checked, the account names and passwords of all employees in the company can be obtained by an ordinary account. Specifically, the attacker sends a jsessionid value for URIs under app/profile/summary/.

• CWE-613

• http://www.iwantacve.cn/index.php/archives/271/Exploit, Third Party Advisory
• http://www.iwantacve.cn/index.php/archives/271/Exploit, Third Party Advisory

Published

Sep 9, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16128Microchip CryptoAuthentication Library CryptoAuthLib prior t…6.8
• CVE-2019-16129Microchip CryptoAuthentication Library CryptoAuthLib prior t…6.8
• CVE-2019-1613A vulnerability in the CLI of Cisco NX-OS Software could all…6.7
• CVE-2019-16130YII2-CMS v1.0 has XSS in protected\core\modules\home\models\…6.1
• CVE-2019-16131framework/admin/modulec_control.php in OKLite v1.2.25 has an…8.8
• CVE-2019-16132An issue was discovered in OKLite v1.2.25. framework/admin/t…6.5
• CVE-2019-16137An issue was discovered in the spin crate before 0.5.2 for R…7.5
• CVE-2019-16138An issue was discovered in the image crate before 0.21.3 for…9.8
• CVE-2019-16139An issue was discovered in the compact_arena crate before 0.…9.8
• CVE-2019-1614A vulnerability in the NX-API feature of Cisco NX-OS Softwar…8.8
• CVE-2019-16140An issue was discovered in the chttp crate before 0.1.3 for …9.8
• CVE-2019-16141An issue was discovered in the once_cell crate before 1.0.1 …7.5