High severity7.7NVD Advisory· Published Oct 21, 2019· Updated Jun 17, 2026

CVE-2019-10716

Description

An Information Disclosure issue in Verodin Director 3.5.3.1 and earlier reveals usernames and passwords of integrated security technologies via a /integrations.json JSON REST API request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Verodin/Director2 versions
cpe:2.3:a:verodin:director:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:verodin:director:*:*:*:*:*:*:*:*range: <=3.5.3.1
- (no CPE)range: <=3.5.3.1
Verodin/Directordescription
Verodin/Director Web Consolellm-create
Range: <3.5.4.0

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/156214/Verodin-Director-Web-Console-3.5.4.0-Password-Disclosure.htmlnvdExploitThird Party AdvisoryVDB Entry
www.nolanbkennedy.com/post/cve-2019-10716-information-disclosure-verodin-directornvdExploitThird Party Advisory
www.verodin.comnvdProduct
www.verodin.com/technology/platformnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.501
epss	0.003
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000