{"id":"CVE-2019-3916","state":"PUBLISHED","title":"Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the pa","description":"Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the password salt by simply requesting an API URL in a web browser (e.g. /api).","publishedAt":"2019-04-11T14:12:44.000Z","updatedAt":"2024-08-04T19:26:27.582Z","severity":null,"assigner":"tenable","products":["Verizon Fios Quantum Gateway (G1100)"],"affected":[{"vendor":"Verizon","product":"Fios Quantum Gateway (G1100)","versions":[{"version":"Firmware version 02.01.00.05","status":"affected"}]}],"references":["https://www.tenable.com/security/research/tra-2019-17"],"weaknesses":[],"ingestedAt":"2026-10-29T19:45:59.128Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2019/3xxx/CVE-2019-3916.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2019-3916","state":"PUBLISHED","datePublished":"2019-04-11T14:12:44.000Z","dateUpdated":"2024-08-04T19:26:27.582Z","assignerShortName":"tenable","assignerOrgId":"5ac1ecc2-367a-4d16-a0b2-35d495ddd0be","dateReserved":"2019-01-03T00:00:00.000Z"},"containers":{"cna":{"descriptions":[{"lang":"en","value":"Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the password salt by simply requesting an API URL in a web browser (e.g. /api)."}],"affected":[{"vendor":"Verizon","product":"Fios Quantum Gateway (G1100)","versions":[{"version":"Firmware version 02.01.00.05","status":"affected"}]}],"references":[{"url":"https://www.tenable.com/security/research/tra-2019-17","tags":["x_refsource_MISC"]}],"problemTypes":[{"descriptions":[{"description":"Password Salt Information Disclosure","lang":"en","type":"text"}]}],"providerMetadata":{"shortName":"tenable","dateUpdated":"2019-04-11T14:12:44.000Z","orgId":"5ac1ecc2-367a-4d16-a0b2-35d495ddd0be"},"datePublic":"2019-04-09T00:00:00.000Z","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"vulnreport@tenable.com","ID":"CVE-2019-3916","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Fios Quantum Gateway (G1100)","version":{"version_data":[{"version_value":"Firmware version 02.01.00.05"}]}}]},"vendor_name":"Verizon"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Information disclosure vulnerability in Verizon Fios Quantum Gateway (G1100) firmware version 02.01.00.05 allows an remote, unauthenticated attacker to retrieve the value of the password salt by simply requesting an API URL in a web browser (e.g. /api)."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"Password Salt Information Disclosure"}]}]},"references":{"reference_data":[{"name":"https://www.tenable.com/security/research/tra-2019-17","refsource":"MISC","url":"https://www.tenable.com/security/research/tra-2019-17"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://www.tenable.com/security/research/tra-2019-17","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-04T19:26:27.582Z"}}]}}}