CVE-2019-12887

8.1 highEPSS 1.2%

High (8.1) in keyidentity linotp. EPSS 1.2% chance of exploitation in the next 30 days. Fixed in linotp 2.11.1.

KeyIdentity LinOTP before 2.10.5.3 has Incorrect Access Control (issue 1 of 2).

Severity

8.1 high

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
CWE: CWE-294
Published: 2019-06-27
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Advisory	Ecosystem	Package	Affected	Fixed in
GHSA-rqg8-xjp2-pg9w	PyPI	linotp	<2.11.1	2.11.1
PYSEC-2019-103	PyPI	linotp	<2.11.1	2.11.1