PT-2018-2064 · Fortinet · Expedition Migration Tool

Paragonsec + 1 · Published 2018-11-20 · Updated 2020-02-17 · CVE-2018-10142

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Expedition Migration Tool versions 1.0.106 and earlier

Description The issue is related to weaknesses in the authentication procedure of the Expedition Migration Tool. This can allow a remote attacker to gain access to protected information. An unauthenticated attacker may be able to enumerate files on the operating system.

Recommendations For versions 1.0.106 and earlier, update to a version that addresses the authentication weaknesses to prevent unauthorized access and file enumeration. As a temporary workaround, consider restricting access to the Expedition Migration Tool to minimize the risk of exploitation.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2019-00014

CVE-2018-10142

Affected Products

Expedition Migration Tool

References · 6

• https://bdu.fstec.ru/vul/2019-00014 · Security Note
• https://osv.dev/vulnerability/CVE-2018-10142 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-10142 · Security Note
• https://securityadvisories.paloaltonetworks.com/Home/Detail/135 · Note
• http://securityfocus.com/bid/106069 · Note
• https://security.paloaltonetworks.com/CVE-2018-10142 · Note