CVE-2019-6481

Severity: high (CVSS 7.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-03-29 · updated 2026-06-17
Weakness: CWE-287

Description

Abine Blur 7.8.2431 allows remote attackers to conduct "Second-Factor Auth Bypass" attacks by using the "Perform a right-click operation to access a forgotten dev menu to insert user passwords that otherwise would require the user to accept a second-factor request in a mobile app." approach, related to a "Multifactor Auth Bypass, Full Disk Encryption Bypass" issue affecting the Affected Chrome Plugin component.

Affected products

Abine Blur: 7.8.2431

References

http://packetstormsecurity.com/files/152139/Abine-Blur-7.8.24x-Authentication-Bypass.html
http://seclists.org/fulldisclosure/2019/Mar/33
https://redcoded.com/cve/2018/03/10/CVE.html
https://redcoded.com/cve/2019/03/18/CVE.html
http://packetstormsecurity.com/files/152139/Abine-Blur-7.8.24x-Authentication-Bypass.html
http://seclists.org/fulldisclosure/2019/Mar/33
https://redcoded.com/cve/2018/03/10/CVE.html
https://redcoded.com/cve/2019/03/18/CVE.html

Get alerted when CVE-2019-6481 or the next vulnerability affects your stack