CVE-2019-1569: XSS
Published Mar 26, 2019
·Updated
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the User Mapping Settings for account name of admin user.
Affected Software
1 affected component
Palo Alto Networks Expedition<=1.1.8
Event History
Mar 26, 2019
CVE Published
via MITRE·09:44 PM
Data Sourced
via MITRE·09:44 PM
DescriptionWeakness
Data Sourced
via NVD·10:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-1569?
CVE-2019-1569 has a high severity rating due to the potential for authenticated attackers to execute arbitrary JavaScript or HTML.
2
How do I fix CVE-2019-1569?
To fix CVE-2019-1569, upgrade the Expedition Migration tool to version 1.1.9 or later.
3
Who is affected by CVE-2019-1569?
CVE-2019-1569 affects users of Expedition Migration tool versions 1.1.8 and earlier.
4
What type of attack is possible with CVE-2019-1569?
CVE-2019-1569 allows authenticated attackers to manipulate user mapping settings via arbitrary JavaScript or HTML code.
5
Is authentication required to exploit CVE-2019-1569?
Yes, exploitation of CVE-2019-1569 requires an authenticated user to access the user mapping settings.