CVE-2019-1010308: Aquaverde Aquarius CMS

Critical severity, CVSS 9.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Aquaverde GmbH Aquarius CMS prior to version 4.1.1 is affected by: Incorrect Access Control. The impact is: The access to the log file is not restricted. It contains sensitive information like passwords etc. The component is: log file. The attack vector is: open the file.

Affected products

• Aquaverde Aquarius CMS: before 4.1.1 (fixed in 4.1.1)

Published 2019-07-15. Last modified 2026-06-17.