CVE-2019-1906

A vulnerability in the Virtual Domain system of Cisco Prime Infrastructure (PI) could allow an authenticated, remote attacker to change the virtual domain configuration, which could lead to privilege escalation. The vulnerability is due to improper validation of API requests. An attacker could exploit this vulnerability by manipulating requests sent to an affected PI server. A successful exploit could allow the attacker to change the virtual domain configuration and possibly elevate privileges.

• CWE-264
• CWE-20

• http://www.securityfocus.com/bid/108855Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-prime-privescalVendor Advisory
• http://www.securityfocus.com/bid/108855Third Party Advisory, VDB Entry
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-20190619-prime-privescalVendor Advisory

Published

Jun 20, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-19054A memory leak in the cx23888_ir_probe() function in drivers/…4.7
• CVE-2019-19055A memory leak in the nl80211_get_ftm_responder_stats() funct…5.5
• CVE-2019-19056A memory leak in the mwifiex_pcie_alloc_cmdrsp_buf() functio…4.7
• CVE-2019-19057Two memory leaks in the mwifiex_pcie_init_evt_ring() functio…3.3
• CVE-2019-19058A memory leak in the alloc_sgtable() function in drivers/net…4.7
• CVE-2019-19059Multiple memory leaks in the iwl_pcie_ctxt_info_gen3_init() …4.7
• CVE-2019-19060A memory leak in the adis_update_scan_mode() function in dri…7.5
• CVE-2019-19061A memory leak in the adis_update_scan_mode_burst() function …7.5
• CVE-2019-19062A memory leak in the crypto_report() function in crypto/cryp…4.7
• CVE-2019-19063Two memory leaks in the rtl_usb_probe() function in drivers/…4.6
• CVE-2019-19064A memory leak in the fsl_lpspi_probe() function in drivers/s…7.5
• CVE-2019-19065A memory leak in the sdma_init() function in drivers/infinib…4.7