CVE-2019-17393

The Customer's Tomedo Server in Version 1.7.3 communicates to the Vendor Tomedo Server via HTTP (in cleartext) that can be sniffed by unauthorized actors. Basic authentication is used for the authentication, making it possible to base64 decode the sniffed credentials and discover the username and password.

• CWE-319
• CWE-522

• http://packetstormsecurity.com/files/154873/Tomedo-Server-1.7.3-Information-Disclosure-Weak-Cryptography.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Oct/33Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/154873/Tomedo-Server-1.7.3-Information-Disclosure-Weak-Cryptography.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Oct/33Mailing List, Third Party Advisory

Published

Oct 18, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-17388Weak file permissions applied to the Aviatrix VPN Client thr…7.8
• CVE-2019-17389In RIOT 2019.07, the MQTT-SN implementation (asymcute) misha…7.5
• CVE-2019-1739A vulnerability in the Network-Based Application Recognition…7.5
• CVE-2019-17390An issue was discovered in the Outlook add-in in Pronestor P…7.8
• CVE-2019-17391An issue was discovered in the Espressif ESP32 mask ROM code…4.6
• CVE-2019-17392Progress Sitefinity 12.1 has a Weak Password Recovery Mechan…9.8
• CVE-2019-17394In the Seesaw Parent and Family application 6.2.5 for Androi…9.8
• CVE-2019-17395In the Rapid Gator application 0.7.1 for Android, the userna…9.8
• CVE-2019-17396In the PowerSchool Mobile application 1.1.8 for Android, the…9.8
• CVE-2019-17397In the DoorDash application through 11.5.2 for Android, the …9.8
• CVE-2019-17398In the Dark Horse Comics application 1.3.21 for Android, tok…9.8
• CVE-2019-17399The Shack Forms Pro extension before 4.0.32 for Joomla! allo…9.8