PT-2020-9959 · Unknown · Management Center

Published 2020-04-09 · Updated 2021-07-21 · CVE-2019-18376

Positive Technologies (AI Summary)

CVSS v3.1

5.9

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Management Center (affected versions not specified)

Description: A CSRF token disclosure issue allows a remote attacker, with access to an authenticated Management Center user's web browser history or a network device that intercepts/logs traffic to Management Center, to obtain CSRF tokens and use them to perform CSRF attacks against Management Center.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2019-18376

Affected Products

Management Center

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-18376 · Security Note
• https://osv.dev/vulnerability/CVE-2019-18376 · Vendor Advisory
• https://support.broadcom.com/security-advisory/security-advisory-detail.html?notificationId=SYMSA1751 · Vendor Advisory
• https://t.me/cvenotify/2635 · Telegram Post