CVE-2019-19015

An issue was discovered in TitanHQ WebTitan before 5.18. The proxy service (which is typically exposed to all users) allows connections to the internal PostgreSQL database of the appliance. By connecting to the database through the proxy (without password authentication), an attacker is able to fully control the appliance database. Through this, several different paths exist to gain further access, or execute code.

• CWE-668

• https://write-up.github.io/webtitan/Exploit, Third Party Advisory
• https://www.webtitan.com/resources/product-updates/Release Notes, Vendor Advisory
• https://write-up.github.io/webtitan/Exploit, Third Party Advisory
• https://www.webtitan.com/resources/product-updates/Release Notes, Vendor Advisory

Published

Dec 2, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-1901A vulnerability in the Link Layer Discovery Protocol (LLDP) …8.8
• CVE-2019-19010Eval injection in the Math plugin of Limnoria (before 2019.1…9.8
• CVE-2019-19011MiniUPnP ngiflib 0.4 has a NULL pointer dereference in GifIn…7.5
• CVE-2019-19012An integer overflow in the search_in_range function in regex…9.8
• CVE-2019-19013A CSRF vulnerability in Pagekit 1.0.17 allows an attacker to…8.8
• CVE-2019-19014An issue was discovered in TitanHQ WebTitan before 5.18. It …7.8
• CVE-2019-19016An issue was discovered in TitanHQ WebTitan before 5.18. Som…7.5
• CVE-2019-19017An issue was discovered in TitanHQ WebTitan before 5.18. The…8.1
• CVE-2019-19018An issue was discovered in TitanHQ WebTitan before 5.18. It …2.7
• CVE-2019-19019An issue was discovered in TitanHQ WebTitan before 5.18. It …7.5
• CVE-2019-19020An issue was discovered in TitanHQ WebTitan before 5.18. In …7.2
• CVE-2019-19021An issue was discovered in TitanHQ WebTitan before 5.18. It …9.8