Skip to main content

Panel CVE-2019-1020002

HIGH
Observable Discrepancy (CWE-203)
2019-07-29 josh@bress.net
Information Disclosure Panel
7.5
CVSS 3.0 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
None
Availability
None

Lifecycle Timeline

1
CVE Published
Jul 29, 2019 - 15:15 nvd
HIGH 7.5

DescriptionNVD

Pterodactyl before 0.7.14 with 2FA allows credential sniffing.

AnalysisAI

Pterodactyl before 0.7.14 with 2FA allows credential sniffing. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-203. Pterodactyl before 0.7.14 with 2FA allows credential sniffing. Affected products include: Pterodactyl Panel. Version information: before 0.7.14.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Panel

View all
CVE-2024-5960 CRITICAL
9.8 Sep 18

Plaintext Storage of a Password vulnerability in Eliz Software Panel allows : Use of Known Domain Credentials.3.24. Rate
CVE-2026-33746 CRITICAL
9.8 Apr 02

JWT signature verification bypass in ConvoyPanel 3.9.0-beta through 4.5.0 allows unauthenticated remote attackers to for
CVE-2024-6877 CRITICAL
9.4 Sep 18

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Softwa
CVE-2024-5958 CRITICAL
9.4 Sep 18

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Eliz Software Pane
CVE-2017-16807 MEDIUM POC
5.4 Nov 13

A cross-site Scripting (XSS) vulnerability in Kirby Panel before 2.3.3, 2.4.x before 2.4.2, and 2.5.x before 2.5.7 exist
CVE-2024-5959 CRITICAL
9.3 Sep 18

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Eliz Softwa
CVE-2020-26255 CRITICAL
9.1 Dec 08

Kirby is a CMS. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, low attack complexity. T
CVE-2026-34241 HIGH
8.7 May 19

Stored cross-site scripting in CtrlPanel (versions ≤1.1.1) allows a low-privileged ticket participant to inject arbitrar
CVE-2026-26016 HIGH
8.1 Feb 19

Missing authorization validation in Pterodactyl Wings prior to version 1.12.1 allows authenticated nodes to access and m
CVE-2021-41129 HIGH
8.1 Oct 06

Pterodactyl is an open-source game server management panel built with PHP 7, React, and Go. Rated high severity (CVSS 8.
CVE-2025-69198 MEDIUM
6.5 Jan 19

Pterodactyl is a free, open-source game server management panel. Pterodactyl implements rate limits that are applied to

CVE-2026-34233 MEDIUM
6.5 May 19

CtrlPanel versions 1.1.1 and prior expose administrative DataTable endpoints without enforcing admin-level authorization

Same weakness CWE-203 – Observable Discrepancy

View all
CVE-2017-5753 MEDIUM POC
5.6
CVE-2017-13099 HIGH POC
7.5
CVE-2017-1000385 MEDIUM POC
5.9
CVE-2017-6168 HIGH POC
7.4
CVE-2017-13098 HIGH POC
7.5
CVE-2017-17427 MEDIUM POC
5.9
CVE-2018-3639 MEDIUM POC
5.5
CVE-2019-25337 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2019-1020002 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy