CVE-2019-1570: XSS
Published Mar 26, 2019
·Updated
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the LDAP server settings.
Affected Software
1 affected component
Palo Alto Networks Expedition<=1.1.8
Event History
Mar 26, 2019
CVE Published
via MITRE·09:46 PM
Data Sourced
via MITRE·09:46 PM
DescriptionWeakness
Data Sourced
via NVD·10:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-1570?
CVE-2019-1570 has been categorized as a high severity vulnerability due to its potential to allow arbitrary JavaScript or HTML execution.
2
How do I fix CVE-2019-1570?
To remediate CVE-2019-1570, upgrade the Palo Alto Networks Expedition tool to a version later than 1.1.8.
3
Who is affected by CVE-2019-1570?
CVE-2019-1570 affects users of Palo Alto Networks Expedition version 1.1.8 and earlier.
4
What type of attack is associated with CVE-2019-1570?
CVE-2019-1570 allows authenticated attackers to execute arbitrary scripts in the LDAP server settings, leading to potential data breaches.
5
Can CVE-2019-1570 be exploited remotely?
CVE-2019-1570 requires authentication, meaning that only authenticated users can exploit the vulnerability.