VYPR
← All advisories
Medium severity5.3NVD Advisory· Published Feb 6, 2020· Updated Jun 17, 2026

CVE-2019-12426

CVE-2019-12426

Description

an unauthenticated user could get access to information of some backend screens by invoking setSessionLocale in Apache OFBiz 16.11.01 to 16.11.06

Affected products

3
  • Apache/Ofbiz3 versions
    cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:apache:ofbiz:*:*:*:*:*:*:*:*range: >=16.11.01,<=16.11.06
    • (no CPE)range: 16.11.01 to 16.11.06
    • (no CPE)range: Apache OFBiz 16.11.01 to 16.11.06

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.