CVE-2019-3579: Infoleak

Published Jun 6, 2019

Updated

MyBB 1.8.19 allows remote attackers to obtain sensitive information because it discloses the username upon receiving a password-reset request that lacks the code parameter.

Affected Software

2 affected components

MyBB MyBB=1.18.19

MyBB MyBB=1.8.19

Event History

Jun 6, 2019

CVE Published

via MITRE·06:11 PM

Data Sourced

via MITRE·06:11 PM

Description

Data Sourced

via NVD·07:29 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2019-3579?

CVE-2019-3579 is a vulnerability in MyBB 1.8.19 that allows remote attackers to obtain sensitive information by disclosing the username in a password-reset request without the code parameter.

How does CVE-2019-3579 affect MyBB?

CVE-2019-3579 affects MyBB version 1.8.19, allowing remote attackers to obtain sensitive information.

What is the severity of CVE-2019-3579?

CVE-2019-3579 has a severity rating of medium, with a severity value of 5.3.

How can I fix CVE-2019-3579?

To fix CVE-2019-3579, you should update MyBB to version 1.8.20 or later, which was released as a security maintenance release.

Where can I find more information about CVE-2019-3579?

You can find more information about CVE-2019-3579 on the MyBB blog at https://blog.mybb.com/ and specifically at https://blog.mybb.com/2019/02/27/mybb-1-8-20-released-security-maintenance-release/.