PT-2019-1522 · Palo Alto Networks · Expedition Migration Tool+1

Sayali Kulkarni · Published 2019-03-01 · Updated 2020-02-17 · CVE-2019-1567

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Expedition Migration tool version 1.1.6 and earlier Palo Alto Networks Migration Tool (affected versions not specified)

Description The issue allows an authenticated attacker to run arbitrary JavaScript or HTML, potentially enabling cross-site scripting attacks. This could be achieved through a specially crafted link, allowing a remote attacker to perform malicious actions.

Recommendations For Expedition Migration tool version 1.1.6 and earlier, update to a version later than 1.1.6 to resolve the issue. For Palo Alto Networks Migration Tool, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2019-00989

CVE-2019-1567

Affected Products

Expedition Migration Tool

Palo Alto Networks Migration Tool

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-1567 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1567 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-00989 · Security Note
• https://security.paloaltonetworks.com/CVE-2019-1567 · Note
• https://securityadvisories.paloaltonetworks.com/Home/Detail/141 · Note
• https://securitylab.ru/vulnerability/498189.php · Note