CVE-2019-12490

Reference Links

• https://www.simplemachines.org/community/index.php?topic=570986.0
• https://www.youtube.com/watch?v=gCVeFoxZ1DI
• https://exchange.xforce.ibmcloud.com/vulnerabilities/175609
• https://www.ibm.com/support/pages/node/7000021 (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• IBM-7000021

Frequently Asked Questions

• What is CVE-2019-12490?

  CVE-2019-12490 is a vulnerability in Simple Machines Forum (SMF) before version 2.0.16 that allows remote attackers to bypass security restrictions.

• How does CVE-2019-12490 impact IBM Security Guardium?

  CVE-2019-12490 may impact IBM Security Guardium versions 11.3, 11.4, and 11.5, if the affected version of Simple Machines Forum (SMF) is installed.

• What is reverse tabnabbing?

  Reverse tabnabbing is a technique that allows an attacker to exploit the trust a user has in a website by redirecting them to a malicious site after they have interacted with a legitimate link on the attacker's website.

• How can an attacker exploit CVE-2019-12490?

  An attacker can exploit CVE-2019-12490 by convincing a victim to visit a specially-crafted website, allowing the attacker to obtain the victim's credentials.

• How can I fix CVE-2019-12490?

  To fix CVE-2019-12490, upgrade Simple Machines Forum (SMF) to version 2.0.16 or later.