PT-2019-1522 · Palo Alto Networks · Expedition Migration Tool+1

Sayali Kulkarni · Publicado 2019-03-01 · Atualizado 2020-02-17 · CVE-2019-1567

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Expedition Migration tool version 1.1.6 and earlier Palo Alto Networks Migration Tool (affected versions not specified)

Description The issue allows an authenticated attacker to run arbitrary JavaScript or HTML, potentially enabling cross-site scripting attacks. This could be achieved through a specially crafted link, allowing a remote attacker to perform malicious actions.

Recommendations For Expedition Migration tool version 1.1.6 and earlier, update to a version later than 1.1.6 to resolve the issue. For Palo Alto Networks Migration Tool, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2019-00989

CVE-2019-1567

Produtos afetados

Expedition Migration Tool

Palo Alto Networks Migration Tool

Referências · 6

• https://security.paloaltonetworks.com/CVE-2019-1567 · Nota
• https://securityadvisories.paloaltonetworks.com/Home/Detail/141 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-1567 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-1567 · Aviso do Fabricante
• https://securitylab.ru/vulnerability/498189.php · Nota
• https://bdu.fstec.ru/vul/2019-00989 · Nota de Segurança