CVE-2019-9157

Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure.

• CWE-22

• http://seclists.org/fulldisclosure/2019/May/6Mailing List, Third Party Advisory
• https://www.sec-consult.com/en/vulnerability-lab/advisories/index.htmlThird Party Advisory
• http://seclists.org/fulldisclosure/2019/May/6Mailing List, Third Party Advisory
• https://www.sec-consult.com/en/vulnerability-lab/advisories/index.htmlThird Party Advisory

Published

Jun 5, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9151An issue was discovered in the HDF HDF5 1.10.4 library. Ther…
• CVE-2019-9152An issue was discovered in the HDF HDF5 1.10.4 library. Ther…
• CVE-2019-9153Improper Verification of a Cryptographic Signature in OpenPG…
• CVE-2019-9154Improper Verification of a Cryptographic Signature in OpenPG…
• CVE-2019-9155A cryptographic issue in OpenPGP.js <=4.2.0 allows an attack…
• CVE-2019-9156Gemalto DS3 Authentication Server 2.6.1-SP01 allows OS Comma…
• CVE-2019-9158Gemalto DS3 Authentication Server 2.6.1-SP01 has Broken Acce…
• CVE-2019-9160WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 a…
• CVE-2019-9161WAC on the Sangfor Sundray WLAN Controller version 3.7.4.2 a…
• CVE-2019-9162In the Linux kernel before 4.20.12, net/ipv4/netfilter/nf_na…7.8
• CVE-2019-9163The connection initiation process in March Networks Command …9.8
• CVE-2019-9164Command injection in Nagios XI before 5.5.11 allows an authe…8.8