[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fGrhfUEz42PT204xChv_q-0NQup8po8xk95p8YMn38pM":3,"g5a-risk:CVE-2019-5648":130},{"success":4,"data":5,"meta":128},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":54,"epssPercentile":27,"epssTimeSeries":55,"severity":56,"affectedProducts":57,"affectedProductsCount":67,"references":68,"referencesCount":67,"weaknesses":77,"weaknessesCount":85,"isActivelyExploited":52,"cisaInfo":27,"otxData":27,"relatedBlogPosts":86,"seoMetadata":87,"configurations":112,"relatedVendorCves":126,"notableEvents":127},"CVE-2019-5648","What is CVE-2019-5648?","Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware \u003C= v6.4 allows one to edit the LDAP service configuration of the balancer and change the LDAP server to an attacker-controlled system, without having to re-enter LDAP credentials. These steps can be used by any authenticated administrative user to expose the LDAP credentials configured in the LDAP connector over the network.","Authenticated, administrative access to a Barracuda Load Balancer ADC running unpatched firmware \u003C= v6.4 allows one to edit the LDAP service configuration of...","2020-03-12T13:15:12.183","2026-06-17T02:38:01.59",6.5,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":30,"CVSSMetricV2":41,"CVSSMetricV40":53},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.1","NETWORK","LOW","HIGH","NONE","UNCHANGED","MEDIUM",null,1.2,5.2,[31],{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":39,"ImpactScore":40},"cve@rapid7.com","Secondary",{"Version":35,"VectorString":36,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":37,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":38,"BaseSeverity":23,"ExploitCodeMaturity":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"TemporalSeverity":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"ModifiedAttackVector":27,"ModifiedAttackComplexity":27,"ModifiedPrivilegesRequired":27,"ModifiedUserInteraction":27,"ModifiedScope":27,"ModifiedConfidentialityImpact":27,"ModifiedIntegrityImpact":27,"ModifiedAvailabilityImpact":27,"EnvironmentalScore":27,"EnvironmentalSeverity":27},"3.0","CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:N","CHANGED",8.7,2.3,5.8,[42],{"Source":17,"Type":18,"CVSSData":43,"BaseSeverity":26,"ExploitabilityScore":50,"ImpactScore":51,"ACInsufInfo":52,"ObtainAllPrivilege":52,"ObtainUserPrivilege":52,"ObtainOtherPrivilege":52,"UserInteractionRequired":52},{"Version":44,"VectorString":45,"AccessVector":21,"AccessComplexity":22,"Authentication":46,"ConfidentialityImpact":47,"IntegrityImpact":47,"AvailabilityImpact":24,"BaseScore":48,"BaseSeverity":49,"Exploitability":27,"RemediationLevel":27,"ReportConfidence":27,"TemporalScore":27,"CollateralDamagePotential":27,"TargetDistribution":27,"ConfidentialityRequirement":27,"IntegrityRequirement":27,"AvailabilityRequirement":27,"EnvironmentalScore":27},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:P\u002FA:N","SINGLE","PARTIAL",5.5,"",8,4.9,false,[],0.01125,[54,54,54,54,54,54,54],"Medium",[58,63],{"vendor":59,"product":60,"version":61,"criteria":62,"vulnerable":4},"barracuda","load_balancer_adc_firmware","*","cpe:2.3:o:barracuda:load_balancer_adc_firmware:*:*:*:*:*:*:*:*",{"vendor":59,"product":64,"version":65,"criteria":66,"vulnerable":52},"load_balancer_adc","-","cpe:2.3:h:barracuda:load_balancer_adc:-:*:*:*:*:*:*:*",2,[69,75],{"url":70,"source":71,"tags":72},"https:\u002F\u002Fblog.rapid7.com\u002F2020\u002F03\u002F05\u002Fr7-2019-39-cve-2019-5648-ldap-credential-exposure-in-barracuda-load-balancer-adc-fixed\u002F","Rapid7",[73,74],"Exploit","Third Party Advisory",{"url":70,"source":71,"tags":76},[73,74],[78],{"id":79,"name":80,"description":81,"extendedDescription":49,"status":82,"abstraction":83,"structure":84},"CWE-522","Insufficiently Protected Credentials","The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and\u002For retrieval.","Incomplete","Class","Simple",1,[],{"title":88,"metaDescription":89,"keywords":90,"canonicalUrl":91,"structuredData":92},"What is CVE-2019-5648? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2019-5648, a medium severity cyber security vulnerability from 2020. Authenticated, administrative access to a Barracuda Load B...","CVE-2019-5648, CVE-2019-5648 vulnerability, CVE-2019-5648 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, barracuda security, load_balancer_adc_firmware vulnerability, load_balancer_adc vulnerability","\u002Fwhat-is\u002Fcve-2019-5648",{"@context":93,"@type":94,"headline":88,"description":89,"datePublished":10,"dateModified":11,"author":95,"publisher":99,"about":103,"mainEntityOfPage":107,"articleSection":110,"keywords":111},"https:\u002F\u002Fschema.org","TechArticle",{"@type":96,"name":97,"url":98},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":96,"name":97,"url":98,"logo":100},{"@type":101,"url":102},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":104,"name":6,"description":105,"additionalType":106},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":108,"@id":109},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2019-5648","Cybersecurity","CVE-2019-5648, CVE-2019-5648 vulnerability, CVE-2019-5648 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[113],{"Operator":114,"Negate":27,"Nodes":115},"AND",[116,122],{"Operator":117,"Negate":52,"CPEMatch":118},"OR",[119],{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":120,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":121},"0CB3331B-F1DA-447F-8430-7D9C2F7A7AFA","6.4",{"Operator":117,"Negate":52,"CPEMatch":123},[124],{"Vulnerable":52,"Criteria":66,"MatchCriteriaID":125,"VersionStartExcluding":27,"VersionStartIncluding":27,"VersionEndExcluding":27,"VersionEndIncluding":27},"596B4E60-9D21-4067-AB2D-930373D29CAA",[],[],{"lastModified":11,"cacheTime":129,"version":44},1794633327617,{"score":131,"band":56,"action":132,"scoredAt":133},45,"Plan remediation","2026-11-13T06:49:21.376647+00:00"]