Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.1
CVE-2019-5919: Nablarch 5 Data Encryption Weakness Exposes Stored Data
CVE-2019-5919 · published 7 years ago
Summary
Nablarch 5 versions 5 and 5u1 to 5u13 have a security weakness in their data encryption. This means that attackers could potentially access or modify sensitive data stored in these systems. To protect your data, update to a fixed version of Nablarch 5 as soon as possible.
What to do
- Update nablarch com.nablarch.framework:nablarch-fw-web to version 1.5.1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| maven | nablarch | com.nablarch.framework:nablarch-fw-web |
< 1.5.1 Fix: upgrade to 1.5.1
|
| – | nablarch_project | nablarch |
5 5u1 5u13 cpe:2.3:a:nablarch_project:nablarch:5:*:*:*:*:*:*:* |
Original advisory text
An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to obtain information of the stored data, to register invalid va...
An incomplete cryptography of the data store function by using hidden tag in Nablarch 5 (5, and 5u1 to 5u13) allows remote attackers to obtain information of the stored data, to register invalid value, or alter the value via unspecified vectors.
References
Internet-facing
3 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker full control (estimated)
Type
CWE-327Use of a Broken Cryptographic Algorithm
Timeline
Published12 Mar 2019
Updated3 Nov 2026
First seen6 Mar 2026
Track software like this
Free during beta