CVE-2019-6716

An unauthenticated Insecure Direct Object Reference (IDOR) in Wicket Core in LogonBox Nervepoint Access Manager 2013 through 2017 allows a remote attacker to enumerate internal Active Directory usernames and group names, and alter back-end server jobs (backup and synchronization jobs), which could allow for the possibility of a Denial of Service attack via a modified jobId parameter in a runJob.html GET request.

• CWE-639

• http://packetstormsecurity.com/files/151373/LongBox-Limited-Access-Manager-Insecure-Direct-Object-Reference.htmlThird Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/46254/Third Party Advisory, VDB Entry
• https://www.logonbox.com/en/Product
• http://packetstormsecurity.com/files/151373/LongBox-Limited-Access-Manager-Insecure-Direct-Object-Reference.htmlThird Party Advisory, VDB Entry
• https://www.exploit-db.com/exploits/46254/Third Party Advisory, VDB Entry
• https://www.logonbox.com/en/Product

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-6707PHPSHE 1.7 has SQL injection via the admin.php?mod=product&a…
• CVE-2019-6708PHPSHE 1.7 has SQL injection via the admin.php?mod=order sta…
• CVE-2019-6710Zyxel NBG-418N v2 v1.00(AAXM.4)C0 devices allow login.cgi CS…
• CVE-2019-6713app\admin\controller\RouteController.php in ThinkCMF 5.0.190…
• CVE-2019-6714An issue was discovered in BlogEngine.NET through 3.3.6.0. A…
• CVE-2019-6715pub/sns.php in the W3 Total Cache plugin before 0.9.4 for Wo…7.5
• CVE-2019-6719An issue has been found in libIEC61850 v1.3.1. There is a us…
• CVE-2019-6724The barracudavpn component of the Barracuda VPN Client prior…
• CVE-2019-6725The rpWLANRedirect.asp ASP page is accessible without authen…
• CVE-2019-6726The WP Fastest Cache plugin through 0.8.9.0 for WordPress al…
• CVE-2019-6727This vulnerability allows remote attackers to execute arbitr…8.8
• CVE-2019-6728This vulnerability allows remote attackers to disclose sensi…6.5