CVE-2019-1571 - The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings

Back Back to CVE browser

MEDIUM

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings

Published Mar 26, 2019

4.8

MEDIUM

CVSS 3.0

EPSS 1.06%

Description

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings.

Affected products

Vendor Palo Alto Networks Product Palo Alto Networks Expedition Migration Tool Default
n/a
- Version
  Expedition 1.1.8 and earlier
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Palo Alto Networks

Palo Alto Networks Expedition Migration Tool

n/a

Version	Status	Constraints
Expedition 1.1.8 and earlier	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

http://www.securityfocus.com/bid/107564
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://securityadvisories.paloaltonetworks.com/Home/Detail/142
x_refsource_CONFIRMThird Party Advisory
https://www.tenable.com/security/research/tra-2019-13
x_refsource_MISCExploitThird Party Advisory

Link	Providers	Tags
http://www.securityfocus.com/bid/107564		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://securityadvisories.paloaltonetworks.com/Home/Detail/142		x_refsource_CONFIRMThird Party Advisory
https://www.tenable.com/security/research/tra-2019-13		x_refsource_MISCExploitThird Party Advisory