What’s Vulnerable › Vulnerabilities

CVE-2019-19015

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-12-02 · updated 2026-06-17
• Weakness: CWE-668

Description

An issue was discovered in TitanHQ WebTitan before 5.18. The proxy service (which is typically exposed to all users) allows connections to the internal PostgreSQL database of the appliance. By connecting to the database through the proxy (without password authentication), an attacker is able to fully control the appliance database. Through this, several different paths exist to gain further access, or execute code.

Affected products

• Titanhq Webtitan: before 5.18 — fixed in 5.18

How to fix

Upgrade to a fixed version: Titanhq Webtitan 5.18. Check the vendor advisory for mitigations.

References

• https://write-up.github.io/webtitan/
• https://www.webtitan.com/resources/product-updates/
• https://write-up.github.io/webtitan/
• https://www.webtitan.com/resources/product-updates/

Get alerted when CVE-2019-19015 or the next vulnerability affects your stack