CVE-2015-4719: 
Pexip Infinity Management Node vulnerability analysis and mitigation

The client API authentication mechanism in Pexip Infinity before version 10 contains a security vulnerability (CVE-2015-4719) that allows remote attackers to gain unauthorized privileges through crafted requests. This vulnerability was disclosed and analyzed by the National Vulnerability Database (NVD) in September 2020 (NVD CVE Details).

The vulnerability has been assigned a CVSS v3.1 Base Score of 9.8 CRITICAL with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. The CVSS v2.0 Base Score is 7.5 HIGH with the vector (AV:N/AC:L/Au:N/C:P/I:P/A:P). The vulnerability is classified under CWE-269 (Improper Privilege Management) (NVD CVE Details).

The vulnerability allows remote attackers to gain elevated privileges within the system through crafted requests to the client API authentication mechanism. This could potentially lead to unauthorized access to sensitive information and system functions (NVD CVE Details).

The vulnerability can be exploited remotely through crafted requests to the client API authentication mechanism. The attack complexity is considered low, requiring no privileges or user interaction for exploitation (NVD CVE Details).

The vulnerability was addressed in Pexip Infinity version 10. Users running affected versions should upgrade to version 10 or later to resolve this security issue (Vendor Advisory).