CVE-2019-1742

A vulnerability in the web UI of Cisco IOS XE Software could allow an unauthenticated, remote attacker to access sensitive configuration information. The vulnerability is due to improper access control to files within the web UI. An attacker could exploit this vulnerability by sending a malicious request to an affected device. A successful exploit could allow the attacker to gain access to sensitive configuration information.

• CWE-16

• http://www.securityfocus.com/bid/107600Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-xeidPatch, Vendor Advisory
• http://www.securityfocus.com/bid/107600Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190327-xeidPatch, Vendor Advisory

Published

Mar 28, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1741A vulnerability in the Cisco Encrypted Traffic Analytics (ET…7.5
• CVE-2019-17414tinylcy Vino through 2017-12-15 allows remote attackers to c…7.5
• CVE-2019-17415A Structured Exception Handler (SEH) based buffer overflow i…9.8
• CVE-2019-17417PbootCMS 2.0.2 allows XSS via vectors involving the Pboot/ad…4.8
• CVE-2019-17418An issue was discovered in MetInfo 7.0. There is SQL injecti…7.2
• CVE-2019-17419An issue was discovered in MetInfo 7.0. There is SQL injecti…7.2
• CVE-2019-17420In OISF LibHTP before 0.5.31, as used in Suricata 4.1.4 and …5.3
• CVE-2019-17421Incorrect file permissions on the packaged Nipper executable…7.8
• CVE-2019-17424A stack-based buffer overflow in the processPrivilage() func…7.8
• CVE-2019-17426Automattic Mongoose through 5.7.4 allows attackers to bypass…9.1
• CVE-2019-17427In Redmine before 3.4.11 and 4.0.x before 4.0.4, persistent …6.1
• CVE-2019-17428An issue was discovered in Intesync Solismed 3.3sp1. An flaw…5.9