CVE-2019-3430 Information disclosure in ZXCLOUD GoldenData VAP
Attackers can exploit an information disclosure flaw in ZTE ZXCLOUD GoldenData VAP to collect sensitive data and potentially damage the system.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-3430?
CVE-2019-3430 is a medium-severity vulnerability in ZTE ZXCLOUD GoldenData VAP, published on 23 Dec 2019. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have an information disclosure vulnerability. Attackers could use this vulnerability to collect data information and damage the system.
Which versions are affected by CVE-2019-3430?
It affects 1 product.
Products include Zte Zxcloud Goldendata Vap.
How do I fix CVE-2019-3430?
No fix has been published for CVE-2019-3430 yet. Limit exposure of the affected software until one is available.
Is CVE-2019-3430 being exploited?
There is no known exploitation of CVE-2019-3430 in the wild and no public exploit code.
Other vulnerabilities in ZTE ZXCLOUD GoldenData VAP
Sources
Also known as GHSA-3383-q9x5-3vq2.