{"id":"CVE-2019-15719","aliases":["EUVD-2019-6655","GHSA-hr4v-jcmg-42h2"],"status":"published","title":"Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a...","description":"Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a message directly to pbs_mom, which fails to properly authenticate the message. This results in code execution as an arbitrary user.","severity":{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.0197,"percentile":0.80553,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2019-10-09T11:52:17Z","modified":"2026-10-24T10:30:27Z","products":[{"vendor":"altair","product":"pbs_professional"}],"references":[{"url":"https://www.pbspro.org/","tags":["x_refsource_MISC","x_transferred","Product","web"]},{"url":"https://www.hpcsec.com","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://www.hpcsec.com/2019/10/08/cve-2019-15719/","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","evidence"]},{"url":"http://packetstormsecurity.com/files/154782/PBS-Professional-19.2.3-Authentication-Bypass.html","tags":["x_refsource_MISC","x_transferred","Exploit","Third Party Advisory","VDB Entry","evidence"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2019-15719"},{"url":"https://www.hpcsec.com/2019/10/08/cve-2019-15719"},{"url":"https://www.pbspro.org"},{"url":"https://github.com/advisories/GHSA-hr4v-jcmg-42h2"}],"sources":{"cve":[{"id":"CVE-2019-15719","description":"Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a message directly to pbs_mom, which fails to properly authenticate the message. This results in code execution as an arbitrary user.","status":"published","published":"2019-10-09T11:52:17Z","modified":"2024-08-05T00:56:22.184Z","updated_at":"2026-11-02T14:20:21.397307Z"}],"euvd":[{"id":"EUVD-2019-6655","description":"Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a message directly to pbs_mom, which fails to properly authenticate the message. This results in code execution as an arbitrary user.","status":"published","published":"2019-10-09T11:52:17Z","modified":"2024-08-05T00:56:22Z","updated_at":"2026-11-03T02:40:35.132035Z"}],"ghsa":[{"id":"GHSA-hr4v-jcmg-42h2","title":"Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a...","description":"Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a message directly to pbs_mom, which fails to properly authenticate the message. This results in code execution as an arbitrary user.","status":"published","published":"2022-05-24T16:58:17Z","modified":"2024-04-04T02:12:39Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:56:07.143453Z"}],"nvd":[{"id":"CVE-2019-15719","description":"Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a message directly to pbs_mom, which fails to properly authenticate the message. This results in code execution as an arbitrary user.","status":"published","published":"2019-10-09T12:15:10.407Z","modified":"2026-06-17T02:20:56.41Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":5.2,"vector":"AV:A/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:05:31.019577Z"}],"osv":[{"id":"CVE-2019-15719","description":"Altair PBS Professional through 19.1.2 allows Privilege Escalation because an attacker can send a message directly to pbs_mom, which fails to properly authenticate the message. This results in code execution as an arbitrary user.","status":"published","published":"2019-10-09T12:15:10.407Z","modified":"2026-10-24T10:30:27.080416237Z","cvss":[{"version":"3.1","score":8,"vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:11.361782Z"}]}}