CVE-2019-15075 affects iNextrix ASTPP versions prior to 4.0.1, stemming from the use of weak, hardcoded private and encryption keys within the application's configuration file. This vulnerability carries a CVSSv3.1 score of 7.5 (High), indicating a critical security flaw that can be exploited remotely without authentication or user interaction to achieve high confidentiality impact. While there is no evidence of active exploitation, public exploit code, or significant community discussion, the presence of hardcoded credentials (CWE-798) and weak cryptographic practices (CWE-327) presents a substantial risk if discovered by malicious actors.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 4.0.1CPE matchmatch criteria | cpe:2.3:a:inextrix:astpp:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.