CVE-2019-5641
Rapid7 InsightVM Information Disclosure after Logout
- State
- Published
- Severity
- 3.3 Low
- Published
- Sep 21, 2022
- Updated
- May 29, 2025
- Reserved
- Jan 7, 2019
Description
Rapid7 InsightVM suffers from an information exposure issue whereby, when the user's session has ended due to inactivity, an attacker can use the Inspect Element browser feature to remove the login panel and view the details available in the last webpage visited by previous user
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.3 Low | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N | rapid7 |
Weaknesses
- CWE-200 Information Exposure
Affected Products
| Product | Versions |
|---|---|
InsightVMRapid7 |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.