PT-2019-13684 · Veritas · Veritas Resiliency Platform

CVE-2019-14415 · Publicado 2019-07-29 · Atualizado 2023-03-03

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Média

Vetor base

AC:L/AV:N/A:L/C:L/I:L/PR:H/S:C/UI:R

Name of the Vulnerable Software and Affected Versions Veritas Resiliency Platform versions prior to 3.4 HF1

Description A persistent cross-site scripting issue allows a malicious user to inject malicious script into another user's browser, related to resiliency plans functionality. This occurs when a victim opens a resiliency plan that an attacker has access to.

Recommendations For versions prior to 3.4 HF1, update to version 3.4 HF1 or later to resolve the issue. As a temporary workaround, consider restricting access to resiliency plans to minimize the risk of exploitation.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2019-14415

Produtos afetados

Veritas Resiliency Platform

Referências · 5

• http://seclists.org/fulldisclosure/2019/Jul/39 · Nota
• https://osv.dev/vulnerability/CVE-2019-14415 · Aviso do Fabricante
• http://packetstormsecurity.com/files/153842/Veritas-Resiliency-Platform-VRP-Traversal-Command-Execution.html · Nota
• https://veritas.com/content/support/en_US/security/VTS19-002.html#Issue4 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2019-14415 · Nota de Segurança