CVE-2019-1657

A vulnerability in Cisco AMP Threat Grid could allow an authenticated, remote attacker to access sensitive information. The vulnerability is due to unsafe creation of API keys. An attacker could exploit this vulnerability by using insecure credentials to gain unauthorized access to the affected device. An exploit could allow the attacker to gain unauthorized access to information by using the API key credentials.

• CWE-200

• http://www.securityfocus.com/bid/106711Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-threat-gridVendor Advisory
• http://www.securityfocus.com/bid/106711Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190123-threat-gridVendor Advisory

Published

Jan 24, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-16564Jenkins Pipeline Aggregator View Plugin 1.8 and earlier does…5.4
• CVE-2019-16565A cross-site request forgery vulnerability in Jenkins Team C…8.8
• CVE-2019-16566A missing permission check in Jenkins Team Concert Plugin 1.…6.5
• CVE-2019-16567A missing permission check in Jenkins Team Concert Plugin 1.…4.3
• CVE-2019-16568Jenkins SCTMExecutor Plugin 2.2 and earlier transmits previo…5.3
• CVE-2019-16569A cross-site request forgery vulnerability in Jenkins Mantis…4.3
• CVE-2019-16570A cross-site request forgery vulnerability in Jenkins RapidD…8.8
• CVE-2019-16571A missing permission check in Jenkins RapidDeploy Plugin 4.1…4.3
• CVE-2019-16572Jenkins Weibo Plugin 1.0.1 and earlier stores credentials un…5.5
• CVE-2019-16573A cross-site request forgery vulnerability in Jenkins Alauda…8.8
• CVE-2019-16574A missing permission check in Jenkins Alauda DevOps Pipeline…6.5
• CVE-2019-16575A cross-site request forgery vulnerability in Jenkins Alauda…8.8