CVE-2019-19022
Last modified
CVE-2019-19022 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which might allow remote attackers to obtain sensitive information, as demonstrated by searching for the NoSyncSearchHistory string in .plist files within public Git repositories.. EPSS estimates a 1.42% chance of exploitation in the next 30 days.
Description
iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which might allow remote attackers to obtain sensitive information, as demonstrated by searching for the NoSyncSearchHistory string in .plist files within public Git repositories.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Iterm2 | Iterm2 | <= 3.3.6 |
References
- https://gitlab.com/gnachman/iterm2/issues/8491Exploit, Third Party Advisory
- https://gitlab.com/gnachman/iterm2/issues/8491Exploit, Third Party Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2019-19022?
How severe is CVE-2019-19022?
How do I fix CVE-2019-19022?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2019
- CVE-2019-19016An issue was discovered in TitanHQ WebTitan before 5.18. Som…7.5
- CVE-2019-19017An issue was discovered in TitanHQ WebTitan before 5.18. The…8.1
- CVE-2019-19018An issue was discovered in TitanHQ WebTitan before 5.18. It …2.7
- CVE-2019-19019An issue was discovered in TitanHQ WebTitan before 5.18. It …7.5
- CVE-2019-19020An issue was discovered in TitanHQ WebTitan before 5.18. In …7.2
- CVE-2019-19021An issue was discovered in TitanHQ WebTitan before 5.18. It …9.8
- CVE-2019-19023Cloud Native Computing Foundation Harbor prior to 1.8.6 and …8.8
- CVE-2019-19025Cloud Native Computing Foundation Harbor prior to 1.8.6 and …8.8
- CVE-2019-19026Cloud Native Computing Foundation Harbor prior to 1.8.6 and …4.9
- CVE-2019-19029Cloud Native Computing Foundation Harbor prior to 1.8.6 and …7.2
- CVE-2019-1903A vulnerability in Cisco Security Manager could allow an una…6.5
- CVE-2019-19030Cloud Native Computing Foundation Harbor before 1.10.3 and 2…5.3
Are you affected by CVE-2019-19022?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST