CVE-2015-4719 Privilege escalation in n/a
Remote attackers can gain privileges via crafted requests in the client API authentication mechanism of Pexip Infinity.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-4719?
CVE-2015-4719 is a critical vulnerability in Pexip Pexip Infinity, published on 24 Sep 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The client API authentication mechanism in Pexip Infinity before 10 allows remote attackers to gain privileges via a crafted request.
Weakness: CWE-269
Which versions are affected by CVE-2015-4719?
It affects 1 product.
Products include Pexip Pexip Infinity.
How do I fix CVE-2015-4719?
No fix has been published for CVE-2015-4719 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-4719 being exploited?
There is no known exploitation of CVE-2015-4719 in the wild and no public exploit code.
Other vulnerabilities in Pexip Pexip Infinity
- CVE-2026-103110 Memory corruption in Infinity
- CVE-2020-11805 Missing authorization in n/a
- CVE-2017-6551 Other in n/a
- CVE-2026-103105 Missing authorization in Infinity
- CVE-2026-103101 Pexip Infinity 30.0 through 40.x before 41.0 is affected by improper input validation in the web server that allows a malicious attacker to
Sources
Also known as GHSA-9rw7-4q6q-6gch.