Security readout for executives and security teams
Plain-English summary
CVE-2019-1010112 describes a CSRF issue in OECMS where a victim could be induced to trigger creation of an administrator account. The record names admincp.php and network access. Public severity data is missing, and the affected/fixed version wording is inconsistent, so urgency depends on confirmed OECMS exposure.
Executive priority
Treat this as a targeted administrative-risk item, not a confirmed mass-exploitation emergency. Prioritize verification if OECMS is present, because unauthorized administrator creation could compromise the site despite incomplete public severity data.
Technical view
The CVE states OECMS v4.3.R60321 and v4.3 later are affected by CSRF in admincp.php, with impact described as adding an administrator account after victim interaction. No CVSS, CWE, detailed patch advisory, or KEV listing is provided. The source says fixed version v4.3, which conflicts with the affected range wording.
Likely exposure
Likely limited to organizations running OECMS, especially versions matching v4.3.R60321 or the unclear v4.3-later range. Exposure requires a reachable administrative component and a victim capable of performing the targeted administrative action.
Exploitation context
The provided sources do not show active exploitation, public weaponization, or CISA KEV inclusion. The described attack depends on user interaction and administrative trust context, but could be serious if it results in unauthorized administrator account creation.
Researcher notes
The main uncertainty is versioning: the record lists v4.3.R60321 and v4.3 later as affected, while also stating fixed version v4.3. Do not assume a safe version without vendor confirmation. No exploit status is evidenced in the provided sources.
Mitigation direction
- Inventory OECMS deployments and record exact installed versions.
- Check OECMS maintainer guidance for the correct fixed or unaffected release.
- Restrict access to admincp.php to trusted administrative paths where possible.
- Review administrator accounts for unexpected additions.
- Add or verify CSRF protections for administrator account changes if maintaining custom code.
Validation and detection
- Confirm whether any internet-facing service runs OECMS.
- Check whether admincp.php is reachable from untrusted networks.
- Compare installed versions with the CVE record and maintainer guidance.
- Review administrative audit logs for suspicious account creation.
- Verify account-creation workflows require CSRF tokens and appropriate authorization.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CVE-2019-1010112 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Unknown
- CVSS
- Not scored
- Known Exploited
- No
- Published
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS and timeline data
No CVSS vectors or timeline events were available in the normalized CVE source material.
Source materials
- CVE List V5 sourceCVE List V5
- https://github.com/LiodAir/images/blob/master/csrf.mdCVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.