Riskcovery

CVE-2019-3569

State
Published
Severity
Not scored
Published
Jun 26, 2019
Updated
Aug 4, 2024
Reserved
Jan 2, 2019

Read the record on cve.org

Description

HHVM, when used with FastCGI, would bind by default to all available interfaces. This behavior could allow a malicious individual unintended direct access to the application, which could result in information disclosure. This issue affects versions 4.3.0, 4.4.0, 4.5.0, 4.6.0, 4.7.0, 4.8.0, versions 3.30.5 and below, and all versions in the 4.0, 4.1, and 4.2 series.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-552 Files or Directories Accessible to External Parties (CWE-552)

Affected Products

ProductVersions
HHVMFacebook
  • 4.8.1Affected
  • 4.8.0Affected
  • 4.7.1Affected
  • 4.7.0Affected
  • 4.6.1Affected
  • 4.6.0Affected
  • 4.5.1Affected
  • 4.5.0Affected
  • 4.4.1Affected
  • 4.4.0Affected
  • 4.3.1Affected
  • 4.0.0 to before unspecifiedAffected
  • 3.30.6Affected
  • 3.30.5 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.