PT-2019-5958 · Andover · Andover Continuum

Published 2019-11-20 · Updated 2019-12-03 · CVE-2019-6853

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Andover Continuum versions 9680, 5740, 5720, bCX4040, bCX9640, 9900, 9940, 9924, and 9702

Description The issue is related to the lack of input data sanitization, which can lead to Cross-site Scripting (XSS) attacks. This could allow a remote attacker to perform XSS attacks.

Recommendations For versions 9680, 5740, 5720, bCX4040, bCX9640, 9900, 9940, 9924, and 9702, consider restricting access to the web server as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2021-03888

CVE-2019-6853

Affected Products

Andover Continuum

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2019-6853 · Security Note
• https://bdu.fstec.ru/vul/2021-03888 · Security Note
• https://se.com/ww/en/download/document/SEVD-2019-316-01 · Vendor Advisory