medium4.8
CVE-2019-1570
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings.
Impact
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paloaltonetworks | Expedition | through 1.1.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/107564
- https://securityadvisories.paloaltonetworks.com/Home/Detail/142
- https://www.tenable.com/security/research/tra-2019-13
- http://www.securityfocus.com/bid/107564
- https://securityadvisories.paloaltonetworks.com/Home/Detail/142
- https://www.tenable.com/security/research/tra-2019-13