Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2019-19022

iTerm2 through 3.3.6 has potentially insufficient documentation about the presence of search history in com.googlecode.iterm2.plist, which might allow remote attackers to obtain sensitive information, as demonstrated by searching for the NoSyncSearchHistory string in .plist files within public Git repositories.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 66.2%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2019-19022
  • Iterm2 » Iterm2 » Version: 1.0.0
    cpe:2.3:a:iterm2:iterm2:1.0.0
  • Iterm2 » Iterm2 » Version: 2.0
    cpe:2.3:a:iterm2:iterm2:2.0
  • Iterm2 » Iterm2 » Version: 2.1.1
    cpe:2.3:a:iterm2:iterm2:2.1.1
  • Iterm2 » Iterm2 » Version: 2.1.3
    cpe:2.3:a:iterm2:iterm2:2.1.3
  • Iterm2 » Iterm2 » Version: 2.1.4
    cpe:2.3:a:iterm2:iterm2:2.1.4
  • Iterm2 » Iterm2 » Version: 2.9.20151111
    cpe:2.3:a:iterm2:iterm2:2.9.20151111
  • Iterm2 » Iterm2 » Version: 2.9.20151229
    cpe:2.3:a:iterm2:iterm2:2.9.20151229
  • Iterm2 » Iterm2 » Version: 2.9.20160102
    cpe:2.3:a:iterm2:iterm2:2.9.20160102
  • Iterm2 » Iterm2 » Version: 2.9.20160113
    cpe:2.3:a:iterm2:iterm2:2.9.20160113
  • Iterm2 » Iterm2 » Version: 2.9.20160206
    cpe:2.3:a:iterm2:iterm2:2.9.20160206
  • Iterm2 » Iterm2 » Version: 2.9.20160313
    cpe:2.3:a:iterm2:iterm2:2.9.20160313
  • Iterm2 » Iterm2 » Version: 2.9.20160422
    cpe:2.3:a:iterm2:iterm2:2.9.20160422
  • Iterm2 » Iterm2 » Version: 2.9.20160426
    cpe:2.3:a:iterm2:iterm2:2.9.20160426
  • Iterm2 » Iterm2 » Version: 2.9.20160510
    cpe:2.3:a:iterm2:iterm2:2.9.20160510
  • Iterm2 » Iterm2 » Version: 2.9.20160523
    cpe:2.3:a:iterm2:iterm2:2.9.20160523
  • Iterm2 » Iterm2 » Version: 3.0.0
    cpe:2.3:a:iterm2:iterm2:3.0.0
  • Iterm2 » Iterm2 » Version: 3.0.1
    cpe:2.3:a:iterm2:iterm2:3.0.1
  • Iterm2 » Iterm2 » Version: 3.0.10
    cpe:2.3:a:iterm2:iterm2:3.0.10
  • Iterm2 » Iterm2 » Version: 3.0.11
    cpe:2.3:a:iterm2:iterm2:3.0.11
  • Iterm2 » Iterm2 » Version: 3.0.12
    cpe:2.3:a:iterm2:iterm2:3.0.12
  • Iterm2 » Iterm2 » Version: 3.0.13
    cpe:2.3:a:iterm2:iterm2:3.0.13
  • Iterm2 » Iterm2 » Version: 3.0.14
    cpe:2.3:a:iterm2:iterm2:3.0.14
  • Iterm2 » Iterm2 » Version: 3.0.15
    cpe:2.3:a:iterm2:iterm2:3.0.15
  • Iterm2 » Iterm2 » Version: 3.0.2
    cpe:2.3:a:iterm2:iterm2:3.0.2
  • Iterm2 » Iterm2 » Version: 3.0.20160531
    cpe:2.3:a:iterm2:iterm2:3.0.20160531
  • Iterm2 » Iterm2 » Version: 3.0.3
    cpe:2.3:a:iterm2:iterm2:3.0.3
  • Iterm2 » Iterm2 » Version: 3.0.4
    cpe:2.3:a:iterm2:iterm2:3.0.4
  • Iterm2 » Iterm2 » Version: 3.0.5
    cpe:2.3:a:iterm2:iterm2:3.0.5
  • Iterm2 » Iterm2 » Version: 3.0.6
    cpe:2.3:a:iterm2:iterm2:3.0.6
  • Iterm2 » Iterm2 » Version: 3.0.7
    cpe:2.3:a:iterm2:iterm2:3.0.7
  • Iterm2 » Iterm2 » Version: 3.0.8
    cpe:2.3:a:iterm2:iterm2:3.0.8
  • Iterm2 » Iterm2 » Version: 3.0.9
    cpe:2.3:a:iterm2:iterm2:3.0.9
  • Iterm2 » Iterm2 » Version: 3.1.0
    cpe:2.3:a:iterm2:iterm2:3.1.0
  • Iterm2 » Iterm2 » Version: 3.1.1
    cpe:2.3:a:iterm2:iterm2:3.1.1
  • Iterm2 » Iterm2 » Version: 3.1.2
    cpe:2.3:a:iterm2:iterm2:3.1.2
  • Iterm2 » Iterm2 » Version: 3.1.3
    cpe:2.3:a:iterm2:iterm2:3.1.3
  • Iterm2 » Iterm2 » Version: 3.1.4
    cpe:2.3:a:iterm2:iterm2:3.1.4
  • Iterm2 » Iterm2 » Version: 3.1.5
    cpe:2.3:a:iterm2:iterm2:3.1.5
  • Iterm2 » Iterm2 » Version: 3.1.6
    cpe:2.3:a:iterm2:iterm2:3.1.6
  • Iterm2 » Iterm2 » Version: 3.1.7
    cpe:2.3:a:iterm2:iterm2:3.1.7
  • Iterm2 » Iterm2 » Version: 3.2.0
    cpe:2.3:a:iterm2:iterm2:3.2.0
  • Iterm2 » Iterm2 » Version: 3.2.1
    cpe:2.3:a:iterm2:iterm2:3.2.1
  • Iterm2 » Iterm2 » Version: 3.2.2
    cpe:2.3:a:iterm2:iterm2:3.2.2
  • Iterm2 » Iterm2 » Version: 3.2.3
    cpe:2.3:a:iterm2:iterm2:3.2.3
  • Iterm2 » Iterm2 » Version: 3.2.4
    cpe:2.3:a:iterm2:iterm2:3.2.4
  • Iterm2 » Iterm2 » Version: 3.2.5
    cpe:2.3:a:iterm2:iterm2:3.2.5
  • Iterm2 » Iterm2 » Version: 3.2.6
    cpe:2.3:a:iterm2:iterm2:3.2.6
  • Iterm2 » Iterm2 » Version: 3.2.7
    cpe:2.3:a:iterm2:iterm2:3.2.7
  • Iterm2 » Iterm2 » Version: 3.2.8
    cpe:2.3:a:iterm2:iterm2:3.2.8
  • Iterm2 » Iterm2 » Version: 3.2.9
    cpe:2.3:a:iterm2:iterm2:3.2.9
  • Iterm2 » Iterm2 » Version: 3.3.0
    cpe:2.3:a:iterm2:iterm2:3.3.0
  • Iterm2 » Iterm2 » Version: 3.3.1
    cpe:2.3:a:iterm2:iterm2:3.3.1
  • Iterm2 » Iterm2 » Version: 3.3.2
    cpe:2.3:a:iterm2:iterm2:3.3.2
  • Iterm2 » Iterm2 » Version: 3.3.3
    cpe:2.3:a:iterm2:iterm2:3.3.3
  • Iterm2 » Iterm2 » Version: 3.3.4
    cpe:2.3:a:iterm2:iterm2:3.3.4
  • Iterm2 » Iterm2 » Version: 3.3.5
    cpe:2.3:a:iterm2:iterm2:3.3.5
  • Iterm2 » Iterm2 » Version: 3.3.6
    cpe:2.3:a:iterm2:iterm2:3.3.6


Products
Pricing
Contact Us

Shodan ® - All rights reserved