[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fZgKoBFJP_zp1XpEwDn-MtCC-6Qag7fcowsF8ZlRs2yE":3,"g5a-risk:CVE-2019-12749":235},{"success":4,"data":5,"meta":233},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":38,"epssPercentile":15,"epssTimeSeries":39,"severity":40,"affectedProducts":41,"affectedProductsCount":61,"references":62,"referencesCount":164,"weaknesses":165,"weaknessesCount":174,"isActivelyExploited":175,"cisaInfo":15,"otxData":15,"relatedBlogPosts":176,"seoMetadata":177,"configurations":202,"relatedVendorCves":231,"notableEvents":232},"CVE-2019-12749","What is CVE-2019-12749?","dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, uses of dbus-daemon), allows cookie spoofing because of symlink mishandling in the reference implementation of DBUS_COOKIE_SHA1 in the libdbus library. (This only affects the DBUS_COOKIE_SHA1 authentication mechanism.) A malicious client with write access to its own home directory could manipulate a ~\u002F.dbus-keyrings symlink to cause a DBusServer with a different uid to read and write in unintended locations. In the worst case, this could result in the DBusServer reusing a cookie that is known to the malicious client, and treating that cookie as evidence that a subsequent client connection came from an attacker-chosen uid, allowing authentication bypass.","dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x before 1.13.12, as used in DBusServer in Canonical Upstart in Ubuntu 14.04 (and in some, less common, ...","2019-06-11T17:29:00.517","2024-12-06T14:15:18.79",7.1,"CVSS:3.0\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":29,"CVSSMetricV40":15},null,[17],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","LOCAL","LOW","NONE","UNCHANGED","HIGH",1.8,5.2,[30],{"Source":18,"Type":19,"CVSSData":31,"BaseSeverity":23,"ExploitabilityScore":36,"ImpactScore":37,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":32,"VectorString":33,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:N","PARTIAL",3.6,3.9,4.9,0.0055,[38,38,38,38,38,38,38],"High",[42,47,52,55,58],{"vendor":43,"product":44,"version":45,"criteria":46,"vulnerable":4},"freedesktop","dbus","*","cpe:2.3:a:freedesktop:dbus:*:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":50,"criteria":51,"vulnerable":4},"canonical","ubuntu_linux","16.04","cpe:2.3:o:canonical:ubuntu_linux:16.04:*:*:*:lts:*:*:*",{"vendor":48,"product":49,"version":53,"criteria":54,"vulnerable":4},"18.04","cpe:2.3:o:canonical:ubuntu_linux:18.04:*:*:*:lts:*:*:*",{"vendor":48,"product":49,"version":56,"criteria":57,"vulnerable":4},"18.10","cpe:2.3:o:canonical:ubuntu_linux:18.10:*:*:*:*:*:*:*",{"vendor":48,"product":49,"version":59,"criteria":60,"vulnerable":4},"19.04","cpe:2.3:o:canonical:ubuntu_linux:19.04:*:*:*:*:*:*:*",5,[63,67,70,73,80,84,88,91,94,97,101,105,109,113,117,120,123,126,128,130,132,134,136,138,140,142,144,146,148,150,152,156,158,160,162],{"url":64,"source":65,"tags":66},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-06\u002Fmsg00059.html","Opensuse",[],{"url":68,"source":65,"tags":69},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-06\u002Fmsg00092.html",[],{"url":71,"source":65,"tags":72},"http:\u002F\u002Flists.opensuse.org\u002Fopensuse-security-announce\u002F2019-07\u002Fmsg00026.html",[],{"url":74,"source":75,"tags":76},"http:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F06\u002F11\u002F2","Openwall",[77,78,79],"Mailing List","Mitigation","Third Party Advisory",{"url":81,"source":82,"tags":83},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F108751","Securityfocus",[],{"url":85,"source":86,"tags":87},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:1726","Red Hat",[],{"url":89,"source":86,"tags":90},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2868",[],{"url":92,"source":86,"tags":93},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:2870",[],{"url":95,"source":86,"tags":96},"https:\u002F\u002Faccess.redhat.com\u002Ferrata\u002FRHSA-2019:3707",[],{"url":98,"source":99,"tags":100},"https:\u002F\u002Flists.debian.org\u002Fdebian-lts-announce\u002F2019\u002F06\u002Fmsg00005.html","Debian",[],{"url":102,"source":103,"tags":104},"https:\u002F\u002Flists.fedoraproject.org\u002Farchives\u002Flist\u002Fpackage-announce%40lists.fedoraproject.org\u002Fmessage\u002FV2CQF37O73VH2JDVX2ILX2KD2KLXLQOU\u002F","Fedoraproject",[],{"url":106,"source":107,"tags":108},"https:\u002F\u002Fseclists.org\u002Fbugtraq\u002F2019\u002FJun\u002F16","Seclists",[],{"url":110,"source":111,"tags":112},"https:\u002F\u002Fsecurity.gentoo.org\u002Fglsa\u002F201909-08","Gentoo",[],{"url":114,"source":115,"tags":116},"https:\u002F\u002Fusn.ubuntu.com\u002F4015-1\u002F","Ubuntu",[79],{"url":118,"source":115,"tags":119},"https:\u002F\u002Fusn.ubuntu.com\u002F4015-2\u002F",[],{"url":121,"source":99,"tags":122},"https:\u002F\u002Fwww.debian.org\u002Fsecurity\u002F2019\u002Fdsa-4462",[],{"url":124,"source":75,"tags":125},"https:\u002F\u002Fwww.openwall.com\u002Flists\u002Foss-security\u002F2019\u002F06\u002F11\u002F2",[77,79],{"url":64,"source":65,"tags":127},[],{"url":68,"source":65,"tags":129},[],{"url":71,"source":65,"tags":131},[],{"url":74,"source":75,"tags":133},[77,78,79],{"url":81,"source":82,"tags":135},[],{"url":85,"source":86,"tags":137},[],{"url":89,"source":86,"tags":139},[],{"url":92,"source":86,"tags":141},[],{"url":95,"source":86,"tags":143},[],{"url":98,"source":99,"tags":145},[],{"url":102,"source":103,"tags":147},[],{"url":106,"source":107,"tags":149},[],{"url":110,"source":111,"tags":151},[],{"url":153,"source":154,"tags":155},"https:\u002F\u002Fsecurity.netapp.com\u002Fadvisory\u002Fntap-20241206-0010\u002F","Netapp",[],{"url":114,"source":115,"tags":157},[79],{"url":118,"source":115,"tags":159},[],{"url":121,"source":99,"tags":161},[],{"url":124,"source":75,"tags":163},[77,79],35,[166],{"id":167,"name":168,"description":169,"extendedDescription":170,"status":171,"abstraction":172,"structure":173},"CWE-59","Improper Link Resolution Before File Access ('Link Following')","The product attempts to access a file based on the filename, but it does not properly prevent that filename from identifying a link or shortcut that resolves to an unintended resource.","","Draft","Base","Simple",1,false,[],{"title":178,"metaDescription":179,"keywords":180,"canonicalUrl":181,"structuredData":182},"What is CVE-2019-12749? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2019-12749, a high severity cyber security vulnerability from 2019. dbus before 1.10.28, 1.12.x before 1.12.16, and 1.13.x befo...","CVE-2019-12749, CVE-2019-12749 vulnerability, CVE-2019-12749 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2019, CVSS score, exploit, patch, remediation, freedesktop security, canonical security, dbus vulnerability, ubuntu_linux vulnerability","\u002Fwhat-is\u002Fcve-2019-12749",{"@context":183,"@type":184,"headline":178,"description":179,"datePublished":10,"dateModified":11,"author":185,"publisher":189,"about":193,"mainEntityOfPage":197,"articleSection":200,"keywords":201},"https:\u002F\u002Fschema.org","TechArticle",{"@type":186,"name":187,"url":188},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":186,"name":187,"url":188,"logo":190},{"@type":191,"url":192},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":194,"name":6,"description":195,"additionalType":196},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":198,"@id":199},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2019-12749","Cybersecurity","CVE-2019-12749, CVE-2019-12749 vulnerability, CVE-2019-12749 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[203,219],{"Operator":15,"Negate":15,"Nodes":204},[205],{"Operator":206,"Negate":15,"CPEMatch":207},"OR",[208,211,215],{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":209,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":210,"VersionEndIncluding":15},"BB8AD8B7-BB21-4B52-8CD8-49DD5C87DBF3","1.10.28",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":212,"VersionStartExcluding":15,"VersionStartIncluding":213,"VersionEndExcluding":214,"VersionEndIncluding":15},"0571A7C4-39AA-4DA6-B221-94D2DCEAF0F0","1.12.0","1.12.16",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":216,"VersionStartExcluding":15,"VersionStartIncluding":217,"VersionEndExcluding":218,"VersionEndIncluding":15},"54E6DF36-CADE-4D21-8106-C13076B54198","1.13.0","1.13.12",{"Operator":15,"Negate":15,"Nodes":220},[221],{"Operator":206,"Negate":15,"CPEMatch":222},[223,225,227,229],{"Vulnerable":4,"Criteria":51,"MatchCriteriaID":224,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"F7016A2A-8365-4F1A-89A2-7A19F2BCAE5B",{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":226,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"23A7C53F-B80F-4E6A-AFA9-58EEA84BE11D",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":228,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"07C312A0-CD2C-4B9C-B064-6409B25C278F",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":230,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":15,"VersionEndIncluding":15},"CD783B0C-9246-47D9-A937-6144FE8BFF0F",[],[],{"lastModified":11,"cacheTime":234,"version":32},1792359993601,{"score":236,"band":237,"action":238,"scoredAt":239},46,"Medium","Plan remediation","2026-10-16T06:46:19.247664+00:00"]