PT-2019-16581 · Zte · Zxcloud Goldendata Vap

Published 2019-12-23 · Updated 2019-12-30 · CVE-2019-3429

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZTE ZXCLOUD GoldenData VAP product versions prior to V4.01.01.02

Description The issue allows attackers to obtain log file information without authorization, potentially leading to the disclosure of sensitive information.

Recommendations For versions prior to V4.01.01.02, update to a version newer than V4.01.01.02 to resolve the issue.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

CVE-2019-3429

Affected Products

Zxcloud Goldendata Vap

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-3429 · Security Note
• https://osv.dev/vulnerability/CVE-2019-3429 · Vendor Advisory
• http://support.zte.com.cn/support/news/LoopholeInfoDetail.aspx?newsId=1012023 · Vendor Advisory