CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11816

Incorrect access control in the WebUI in OPNsense before version 19.1.8, and pfsense before 2.4.4-p3 allows remote authenticated users to escalate privileges to administrator via a specially crafted request.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.021

EPSS Ranking 83.4%

CVSS Severity

CVSS v3 Score 7.2

CVSS v2 Score 6.5

References

Products affected by CVE-2019-11816

Netgate » Pfsense » Version: 2.0

cpe:2.3:a:netgate:pfsense:2.0
Netgate » Pfsense » Version: 2.0.1

cpe:2.3:a:netgate:pfsense:2.0.1
Netgate » Pfsense » Version: 2.0.2

cpe:2.3:a:netgate:pfsense:2.0.2
Netgate » Pfsense » Version: 2.0.3

cpe:2.3:a:netgate:pfsense:2.0.3
Netgate » Pfsense » Version: 2.1.0

cpe:2.3:a:netgate:pfsense:2.1.0
Netgate » Pfsense » Version: 2.1.1

cpe:2.3:a:netgate:pfsense:2.1.1
Netgate » Pfsense » Version: 2.1.2

cpe:2.3:a:netgate:pfsense:2.1.2
Netgate » Pfsense » Version: 2.1.3

cpe:2.3:a:netgate:pfsense:2.1.3
Netgate » Pfsense » Version: 2.1.4

cpe:2.3:a:netgate:pfsense:2.1.4
Netgate » Pfsense » Version: 2.1.5

cpe:2.3:a:netgate:pfsense:2.1.5
Netgate » Pfsense » Version: 2.2

cpe:2.3:a:netgate:pfsense:2.2
Netgate » Pfsense » Version: 2.2.1

cpe:2.3:a:netgate:pfsense:2.2.1
Netgate » Pfsense » Version: 2.2.2

cpe:2.3:a:netgate:pfsense:2.2.2
Netgate » Pfsense » Version: 2.2.3

cpe:2.3:a:netgate:pfsense:2.2.3
Netgate » Pfsense » Version: 2.2.4

cpe:2.3:a:netgate:pfsense:2.2.4
Netgate » Pfsense » Version: 2.2.5

cpe:2.3:a:netgate:pfsense:2.2.5
Netgate » Pfsense » Version: 2.2.6

cpe:2.3:a:netgate:pfsense:2.2.6
Netgate » Pfsense » Version: 2.3

cpe:2.3:a:netgate:pfsense:2.3
Netgate » Pfsense » Version: 2.3.1

cpe:2.3:a:netgate:pfsense:2.3.1
Netgate » Pfsense » Version: 2.3.2

cpe:2.3:a:netgate:pfsense:2.3.2
Netgate » Pfsense » Version: 2.3.3

cpe:2.3:a:netgate:pfsense:2.3.3
Netgate » Pfsense » Version: 2.3.4

cpe:2.3:a:netgate:pfsense:2.3.4
Netgate » Pfsense » Version: 2.3.5

cpe:2.3:a:netgate:pfsense:2.3.5
Netgate » Pfsense » Version: 2.4

cpe:2.3:a:netgate:pfsense:2.4
Netgate » Pfsense » Version: 2.4.1

cpe:2.3:a:netgate:pfsense:2.4.1
Netgate » Pfsense » Version: 2.4.2

cpe:2.3:a:netgate:pfsense:2.4.2
Netgate » Pfsense » Version: 2.4.3

cpe:2.3:a:netgate:pfsense:2.4.3
Netgate » Pfsense » Version: 2.4.4

cpe:2.3:a:netgate:pfsense:2.4.4
Opnsense » Opnsense » Version: 15.1

cpe:2.3:a:opnsense:opnsense:15.1
Opnsense » Opnsense » Version: 15.1.1

cpe:2.3:a:opnsense:opnsense:15.1.1
Opnsense » Opnsense » Version: 15.1.10

cpe:2.3:a:opnsense:opnsense:15.1.10
Opnsense » Opnsense » Version: 15.1.10.1

cpe:2.3:a:opnsense:opnsense:15.1.10.1
Opnsense » Opnsense » Version: 15.1.10.2

cpe:2.3:a:opnsense:opnsense:15.1.10.2
Opnsense » Opnsense » Version: 15.1.11

cpe:2.3:a:opnsense:opnsense:15.1.11
Opnsense » Opnsense » Version: 15.1.11.1

cpe:2.3:a:opnsense:opnsense:15.1.11.1
Opnsense » Opnsense » Version: 15.1.11.2

cpe:2.3:a:opnsense:opnsense:15.1.11.2
Opnsense » Opnsense » Version: 15.1.11.3

cpe:2.3:a:opnsense:opnsense:15.1.11.3
Opnsense » Opnsense » Version: 15.1.11.4

cpe:2.3:a:opnsense:opnsense:15.1.11.4
Opnsense » Opnsense » Version: 15.1.12

cpe:2.3:a:opnsense:opnsense:15.1.12
Opnsense » Opnsense » Version: 15.1.2

cpe:2.3:a:opnsense:opnsense:15.1.2
Opnsense » Opnsense » Version: 15.1.3

cpe:2.3:a:opnsense:opnsense:15.1.3
Opnsense » Opnsense » Version: 15.1.4

cpe:2.3:a:opnsense:opnsense:15.1.4
Opnsense » Opnsense » Version: 15.1.5

cpe:2.3:a:opnsense:opnsense:15.1.5
Opnsense » Opnsense » Version: 15.1.6

cpe:2.3:a:opnsense:opnsense:15.1.6
Opnsense » Opnsense » Version: 15.1.6.1

cpe:2.3:a:opnsense:opnsense:15.1.6.1
Opnsense » Opnsense » Version: 15.1.7

cpe:2.3:a:opnsense:opnsense:15.1.7
Opnsense » Opnsense » Version: 15.1.7.1

cpe:2.3:a:opnsense:opnsense:15.1.7.1
Opnsense » Opnsense » Version: 15.1.7.2

cpe:2.3:a:opnsense:opnsense:15.1.7.2
Opnsense » Opnsense » Version: 15.1.8

cpe:2.3:a:opnsense:opnsense:15.1.8
Opnsense » Opnsense » Version: 15.1.8.1

cpe:2.3:a:opnsense:opnsense:15.1.8.1
Opnsense » Opnsense » Version: 15.1.8.2

cpe:2.3:a:opnsense:opnsense:15.1.8.2
Opnsense » Opnsense » Version: 15.1.8.3

cpe:2.3:a:opnsense:opnsense:15.1.8.3
Opnsense » Opnsense » Version: 15.1.8.4

cpe:2.3:a:opnsense:opnsense:15.1.8.4
Opnsense » Opnsense » Version: 15.1.9

cpe:2.3:a:opnsense:opnsense:15.1.9
Opnsense » Opnsense » Version: 15.1.9.1

cpe:2.3:a:opnsense:opnsense:15.1.9.1
Opnsense » Opnsense » Version: 15.1.9.2

cpe:2.3:a:opnsense:opnsense:15.1.9.2
Opnsense » Opnsense » Version: 15.7

cpe:2.3:a:opnsense:opnsense:15.7
Opnsense » Opnsense » Version: 15.7.1

cpe:2.3:a:opnsense:opnsense:15.7.1
Opnsense » Opnsense » Version: 15.7.10

cpe:2.3:a:opnsense:opnsense:15.7.10
Opnsense » Opnsense » Version: 15.7.11

cpe:2.3:a:opnsense:opnsense:15.7.11
Opnsense » Opnsense » Version: 15.7.12

cpe:2.3:a:opnsense:opnsense:15.7.12
Opnsense » Opnsense » Version: 15.7.13

cpe:2.3:a:opnsense:opnsense:15.7.13
Opnsense » Opnsense » Version: 15.7.14

cpe:2.3:a:opnsense:opnsense:15.7.14
Opnsense » Opnsense » Version: 15.7.15

cpe:2.3:a:opnsense:opnsense:15.7.15
Opnsense » Opnsense » Version: 15.7.16

cpe:2.3:a:opnsense:opnsense:15.7.16
Opnsense » Opnsense » Version: 15.7.17

cpe:2.3:a:opnsense:opnsense:15.7.17
Opnsense » Opnsense » Version: 15.7.18

cpe:2.3:a:opnsense:opnsense:15.7.18
Opnsense » Opnsense » Version: 15.7.19

cpe:2.3:a:opnsense:opnsense:15.7.19
Opnsense » Opnsense » Version: 15.7.2

cpe:2.3:a:opnsense:opnsense:15.7.2
Opnsense » Opnsense » Version: 15.7.20

cpe:2.3:a:opnsense:opnsense:15.7.20
Opnsense » Opnsense » Version: 15.7.21

cpe:2.3:a:opnsense:opnsense:15.7.21
Opnsense » Opnsense » Version: 15.7.22

cpe:2.3:a:opnsense:opnsense:15.7.22
Opnsense » Opnsense » Version: 15.7.23

cpe:2.3:a:opnsense:opnsense:15.7.23
Opnsense » Opnsense » Version: 15.7.24

cpe:2.3:a:opnsense:opnsense:15.7.24
Opnsense » Opnsense » Version: 15.7.25

cpe:2.3:a:opnsense:opnsense:15.7.25
Opnsense » Opnsense » Version: 15.7.3

cpe:2.3:a:opnsense:opnsense:15.7.3
Opnsense » Opnsense » Version: 15.7.4

cpe:2.3:a:opnsense:opnsense:15.7.4
Opnsense » Opnsense » Version: 15.7.5

cpe:2.3:a:opnsense:opnsense:15.7.5
Opnsense » Opnsense » Version: 15.7.6

cpe:2.3:a:opnsense:opnsense:15.7.6
Opnsense » Opnsense » Version: 15.7.7

cpe:2.3:a:opnsense:opnsense:15.7.7
Opnsense » Opnsense » Version: 15.7.8

cpe:2.3:a:opnsense:opnsense:15.7.8
Opnsense » Opnsense » Version: 15.7.9

cpe:2.3:a:opnsense:opnsense:15.7.9
Opnsense » Opnsense » Version: 15.7.99

cpe:2.3:a:opnsense:opnsense:15.7.99
Opnsense » Opnsense » Version: 16.1

cpe:2.3:a:opnsense:opnsense:16.1
Opnsense » Opnsense » Version: 16.1.1

cpe:2.3:a:opnsense:opnsense:16.1.1
Opnsense » Opnsense » Version: 16.1.10

cpe:2.3:a:opnsense:opnsense:16.1.10
Opnsense » Opnsense » Version: 16.1.11

cpe:2.3:a:opnsense:opnsense:16.1.11
Opnsense » Opnsense » Version: 16.1.12

cpe:2.3:a:opnsense:opnsense:16.1.12
Opnsense » Opnsense » Version: 16.1.13

cpe:2.3:a:opnsense:opnsense:16.1.13
Opnsense » Opnsense » Version: 16.1.14

cpe:2.3:a:opnsense:opnsense:16.1.14
Opnsense » Opnsense » Version: 16.1.15

cpe:2.3:a:opnsense:opnsense:16.1.15
Opnsense » Opnsense » Version: 16.1.16

cpe:2.3:a:opnsense:opnsense:16.1.16
Opnsense » Opnsense » Version: 16.1.17

cpe:2.3:a:opnsense:opnsense:16.1.17
Opnsense » Opnsense » Version: 16.1.18

cpe:2.3:a:opnsense:opnsense:16.1.18
Opnsense » Opnsense » Version: 16.1.19

cpe:2.3:a:opnsense:opnsense:16.1.19
Opnsense » Opnsense » Version: 16.1.2

cpe:2.3:a:opnsense:opnsense:16.1.2
Opnsense » Opnsense » Version: 16.1.20

cpe:2.3:a:opnsense:opnsense:16.1.20
Opnsense » Opnsense » Version: 16.1.3

cpe:2.3:a:opnsense:opnsense:16.1.3
Opnsense » Opnsense » Version: 16.1.4

cpe:2.3:a:opnsense:opnsense:16.1.4
Opnsense » Opnsense » Version: 16.1.5

cpe:2.3:a:opnsense:opnsense:16.1.5
Opnsense » Opnsense » Version: 16.1.6

cpe:2.3:a:opnsense:opnsense:16.1.6
Opnsense » Opnsense » Version: 16.1.7

cpe:2.3:a:opnsense:opnsense:16.1.7
Opnsense » Opnsense » Version: 16.1.8

cpe:2.3:a:opnsense:opnsense:16.1.8
Opnsense » Opnsense » Version: 16.1.9

cpe:2.3:a:opnsense:opnsense:16.1.9
Opnsense » Opnsense » Version: 16.7

cpe:2.3:a:opnsense:opnsense:16.7
Opnsense » Opnsense » Version: 16.7.1

cpe:2.3:a:opnsense:opnsense:16.7.1
Opnsense » Opnsense » Version: 16.7.10

cpe:2.3:a:opnsense:opnsense:16.7.10
Opnsense » Opnsense » Version: 16.7.11

cpe:2.3:a:opnsense:opnsense:16.7.11
Opnsense » Opnsense » Version: 16.7.12

cpe:2.3:a:opnsense:opnsense:16.7.12
Opnsense » Opnsense » Version: 16.7.13

cpe:2.3:a:opnsense:opnsense:16.7.13
Opnsense » Opnsense » Version: 16.7.14

cpe:2.3:a:opnsense:opnsense:16.7.14
Opnsense » Opnsense » Version: 16.7.2

cpe:2.3:a:opnsense:opnsense:16.7.2
Opnsense » Opnsense » Version: 16.7.3

cpe:2.3:a:opnsense:opnsense:16.7.3
Opnsense » Opnsense » Version: 16.7.4

cpe:2.3:a:opnsense:opnsense:16.7.4
Opnsense » Opnsense » Version: 16.7.5

cpe:2.3:a:opnsense:opnsense:16.7.5
Opnsense » Opnsense » Version: 16.7.6

cpe:2.3:a:opnsense:opnsense:16.7.6
Opnsense » Opnsense » Version: 16.7.7

cpe:2.3:a:opnsense:opnsense:16.7.7
Opnsense » Opnsense » Version: 16.7.8

cpe:2.3:a:opnsense:opnsense:16.7.8
Opnsense » Opnsense » Version: 16.7.9

cpe:2.3:a:opnsense:opnsense:16.7.9
Opnsense » Opnsense » Version: 17.1

cpe:2.3:a:opnsense:opnsense:17.1
Opnsense » Opnsense » Version: 17.1.1

cpe:2.3:a:opnsense:opnsense:17.1.1
Opnsense » Opnsense » Version: 17.1.10

cpe:2.3:a:opnsense:opnsense:17.1.10
Opnsense » Opnsense » Version: 17.1.11

cpe:2.3:a:opnsense:opnsense:17.1.11
Opnsense » Opnsense » Version: 17.1.2

cpe:2.3:a:opnsense:opnsense:17.1.2
Opnsense » Opnsense » Version: 17.1.3

cpe:2.3:a:opnsense:opnsense:17.1.3
Opnsense » Opnsense » Version: 17.1.4

cpe:2.3:a:opnsense:opnsense:17.1.4
Opnsense » Opnsense » Version: 17.1.5

cpe:2.3:a:opnsense:opnsense:17.1.5
Opnsense » Opnsense » Version: 17.1.6

cpe:2.3:a:opnsense:opnsense:17.1.6
Opnsense » Opnsense » Version: 17.1.7

cpe:2.3:a:opnsense:opnsense:17.1.7
Opnsense » Opnsense » Version: 17.1.8

cpe:2.3:a:opnsense:opnsense:17.1.8
Opnsense » Opnsense » Version: 17.1.9

cpe:2.3:a:opnsense:opnsense:17.1.9
Opnsense » Opnsense » Version: 17.7

cpe:2.3:a:opnsense:opnsense:17.7
Opnsense » Opnsense » Version: 17.7.1

cpe:2.3:a:opnsense:opnsense:17.7.1
Opnsense » Opnsense » Version: 17.7.10

cpe:2.3:a:opnsense:opnsense:17.7.10
Opnsense » Opnsense » Version: 17.7.11

cpe:2.3:a:opnsense:opnsense:17.7.11
Opnsense » Opnsense » Version: 17.7.12

cpe:2.3:a:opnsense:opnsense:17.7.12
Opnsense » Opnsense » Version: 17.7.2

cpe:2.3:a:opnsense:opnsense:17.7.2
Opnsense » Opnsense » Version: 17.7.3

cpe:2.3:a:opnsense:opnsense:17.7.3
Opnsense » Opnsense » Version: 17.7.4

cpe:2.3:a:opnsense:opnsense:17.7.4
Opnsense » Opnsense » Version: 17.7.5

cpe:2.3:a:opnsense:opnsense:17.7.5
Opnsense » Opnsense » Version: 17.7.6

cpe:2.3:a:opnsense:opnsense:17.7.6
Opnsense » Opnsense » Version: 17.7.7

cpe:2.3:a:opnsense:opnsense:17.7.7
Opnsense » Opnsense » Version: 17.7.8

cpe:2.3:a:opnsense:opnsense:17.7.8
Opnsense » Opnsense » Version: 17.7.9

cpe:2.3:a:opnsense:opnsense:17.7.9
Opnsense » Opnsense » Version: 18.1

cpe:2.3:a:opnsense:opnsense:18.1
Opnsense » Opnsense » Version: 18.1.1

cpe:2.3:a:opnsense:opnsense:18.1.1
Opnsense » Opnsense » Version: 18.1.10

cpe:2.3:a:opnsense:opnsense:18.1.10
Opnsense » Opnsense » Version: 18.1.11

cpe:2.3:a:opnsense:opnsense:18.1.11
Opnsense » Opnsense » Version: 18.1.12

cpe:2.3:a:opnsense:opnsense:18.1.12
Opnsense » Opnsense » Version: 18.1.13

cpe:2.3:a:opnsense:opnsense:18.1.13
Opnsense » Opnsense » Version: 18.1.2

cpe:2.3:a:opnsense:opnsense:18.1.2
Opnsense » Opnsense » Version: 18.1.3

cpe:2.3:a:opnsense:opnsense:18.1.3
Opnsense » Opnsense » Version: 18.1.4

cpe:2.3:a:opnsense:opnsense:18.1.4
Opnsense » Opnsense » Version: 18.1.5

cpe:2.3:a:opnsense:opnsense:18.1.5
Opnsense » Opnsense » Version: 18.1.6

cpe:2.3:a:opnsense:opnsense:18.1.6
Opnsense » Opnsense » Version: 18.1.7

cpe:2.3:a:opnsense:opnsense:18.1.7
Opnsense » Opnsense » Version: 18.1.8

cpe:2.3:a:opnsense:opnsense:18.1.8
Opnsense » Opnsense » Version: 18.1.9

cpe:2.3:a:opnsense:opnsense:18.1.9
Opnsense » Opnsense » Version: 18.1rc1

cpe:2.3:a:opnsense:opnsense:18.1rc1
Opnsense » Opnsense » Version: 18.1rc2

cpe:2.3:a:opnsense:opnsense:18.1rc2
Opnsense » Opnsense » Version: 18.7

cpe:2.3:a:opnsense:opnsense:18.7
Opnsense » Opnsense » Version: 18.7.0

cpe:2.3:a:opnsense:opnsense:18.7.0
Opnsense » Opnsense » Version: 18.7.1

cpe:2.3:a:opnsense:opnsense:18.7.1
Opnsense » Opnsense » Version: 18.7.10

cpe:2.3:a:opnsense:opnsense:18.7.10
Opnsense » Opnsense » Version: 18.7.2

cpe:2.3:a:opnsense:opnsense:18.7.2
Opnsense » Opnsense » Version: 18.7.3

cpe:2.3:a:opnsense:opnsense:18.7.3
Opnsense » Opnsense » Version: 18.7.4

cpe:2.3:a:opnsense:opnsense:18.7.4
Opnsense » Opnsense » Version: 18.7.5

cpe:2.3:a:opnsense:opnsense:18.7.5
Opnsense » Opnsense » Version: 18.7.6

cpe:2.3:a:opnsense:opnsense:18.7.6
Opnsense » Opnsense » Version: 18.7.7

cpe:2.3:a:opnsense:opnsense:18.7.7
Opnsense » Opnsense » Version: 18.7.8

cpe:2.3:a:opnsense:opnsense:18.7.8
Opnsense » Opnsense » Version: 18.7.9

cpe:2.3:a:opnsense:opnsense:18.7.9
Opnsense » Opnsense » Version: 19.1

cpe:2.3:a:opnsense:opnsense:19.1
Opnsense » Opnsense » Version: 19.1.1

cpe:2.3:a:opnsense:opnsense:19.1.1
Opnsense » Opnsense » Version: 19.1.2

cpe:2.3:a:opnsense:opnsense:19.1.2
Opnsense » Opnsense » Version: 19.1.3

cpe:2.3:a:opnsense:opnsense:19.1.3
Opnsense » Opnsense » Version: 19.1.4

cpe:2.3:a:opnsense:opnsense:19.1.4
Opnsense » Opnsense » Version: 19.1.5

cpe:2.3:a:opnsense:opnsense:19.1.5
Opnsense » Opnsense » Version: 19.1.6

cpe:2.3:a:opnsense:opnsense:19.1.6
Opnsense » Opnsense » Version: 19.1.7

cpe:2.3:a:opnsense:opnsense:19.1.7
Opnsense » Opnsense » Version: 8.1.13

cpe:2.3:a:opnsense:opnsense:8.1.13

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2019-11816

Products

Pricing

Contact Us