CVE-2019-1717

A vulnerability in the web-based management interface of Cisco Video Surveillance Manager could allow an unauthenticated, remote attacker to access sensitive information. The vulnerability is due to improper validation of parameters handled by the web-based management interface. An attacker could exploit this vulnerability by sending malicious requests to an affected component. A successful exploit could allow the attacker to download arbitrary files from the affected device, which could contain sensitive information.

• CWE-22
• CWE-22

• http://www.securityfocus.com/bid/108336Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-cvsmVendor Advisory
• http://www.securityfocus.com/bid/108336Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190515-cvsmVendor Advisory

Published

May 15, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17148This vulnerability allows local attackers to escalate privil…7.8
• CVE-2019-17149Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2019-1715A vulnerability in the Deterministic Random Bit Generator (D…7.5
• CVE-2019-17150Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. Reason: T…
• CVE-2019-17151This vulnerability allows remote attackers redirect users to…5.4
• CVE-2019-1716A vulnerability in the web-based management interface of Ses…7.5
• CVE-2019-17175joyplus-cms 1.6.0 allows manager/admin_pic.php?rootpath= abs…7.5
• CVE-2019-17176Genesys PureEngage Digital (eServices) 8.1.x allows XSS via …6.1
• CVE-2019-17177libfreerdp/codec/region.c in FreeRDP through 1.1.x and 2.x t…7.5
• CVE-2019-17178HuffmanTree_makeFromFrequencies in lodepng.c in LodePNG thro…7.5
• CVE-2019-171794.1.0, 4.1.1, 4.1.2, 4.1.2.3, 4.1.2.6, 4.1.2.7, 4.2.0, 4.2.1…6.1
• CVE-2019-1718A vulnerability in the web interface of Cisco Identity Servi…7.5