CVE-2019-1010308

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-07-15 · updated 2026-06-17
Weakness: CWE-522

Description

Aquaverde GmbH Aquarius CMS prior to version 4.1.1 is affected by: Incorrect Access Control. The impact is: The access to the log file is not restricted. It contains sensitive information like passwords etc. The component is: log file. The attack vector is: open the file.

Affected products

Aquaverde GmbH Aquarius CMS: before 4.1.1 — fixed in 4.1.1

How to fix

Upgrade to a fixed version: Aquaverde GmbH Aquarius CMS 4.1.1. Check the vendor advisory for mitigations.

References

https://github.com/aquaverde/aquarius-core
https://github.com/aquaverde/aquarius-core/commit/e1af89aa9df07ea265d879518ede9eb98aa494e0
https://github.com/aquaverde/aquarius-core
https://github.com/aquaverde/aquarius-core/commit/e1af89aa9df07ea265d879518ede9eb98aa494e0

Get alerted when CVE-2019-1010308 or the next vulnerability affects your stack