CVE-2019-5919
CRITICALNablarch 5 and 5u1-5u13 - Use of a Broken or Risky Cryptographic Algorithm in Data Store Function
Title source: llmDescription
An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value via unspecified vectors.
References (2)
Core 2
Core References
Third Party Advisory x_refsource_misc
https://nablarch.atlassian.net/browse/NAB-313
Third Party Advisory third-party-advisory
x_refsource_jvn
http://jvn.jp/en/jp/JVN56542712/index.html
Scores
CVSS v3
9.1
EPSS
0.0095
EPSS Percentile
56.7%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Details
CWE
CWE-327
Status
published
Products (4)
com.nablarch.framework/nablarch-fw-web
0 - 1.5.1Maven
nablarch_project/nablarch
5
nablarch_project/nablarch
5u1
nablarch_project/nablarch
5u13
Published
Mar 12, 2019
Tracked Since
Feb 18, 2026