Vulnerabilities > CVE-2019-18355 - Server-Side Request Forgery (SSRF) vulnerability in Thycotic Secret Server

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

critical

NVD

Published: 2019-10-23

Updated: 2019-10-30

Summary

An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7.

Part	Description	Count
Application	Thycotic Thycotic Secret Server 2.3 Thycotic Secret Server 7.5.000000 Thycotic Secret Server 8.0.000004 Thycotic Secret Server 8.0.000005 Thycotic Secret Server 8.1.000000 Thycotic Secret Server 8.1.000011 Thycotic Secret Server 8.1.000014 Thycotic Secret Server 8.2.000000 Thycotic Secret Server 8.2.000001 Thycotic Secret Server 8.3.000000 Thycotic Secret Server 8.3.000001 Thycotic Secret Server 8.3.000002 Thycotic Secret Server 8.3.000019 Thycotic Secret Server 8.4.000000 Thycotic Secret Server 8.4.000004 Thycotic Secret Server 8.5.000000 Thycotic Secret Server 8.6.000000 Thycotic Secret Server 8.6.000009 Thycotic Secret Server 8.6.000010 Thycotic Secret Server 8.7.000000 Thycotic Secret Server 8.8.000000 Thycotic Secret Server 8.8.000001 Thycotic Secret Server 8.8.000004 Thycotic Secret Server 10.2.000018 Thycotic Secret Server 10.3.000000	25