CVE-2019-1571: XSS
Published Mar 26, 2019
·Updated
The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings.
Affected Software
1 affected component
Palo Alto Networks Expedition<=1.1.8
Event History
Mar 26, 2019
CVE Published
via MITRE·10:08 PM
Data Sourced
via MITRE·10:08 PM
DescriptionWeakness
Data Sourced
via NVD·11:29 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2019-1571?
CVE-2019-1571 has been classified as a medium severity vulnerability.
2
What kind of attacks can be executed using CVE-2019-1571?
CVE-2019-1571 allows an authenticated attacker to execute arbitrary JavaScript or HTML in RADIUS server settings.
3
How do I fix CVE-2019-1571?
To fix CVE-2019-1571, upgrade the Expedition tool to version 1.1.9 or later.
4
Who is affected by CVE-2019-1571?
CVE-2019-1571 affects users of the Palo Alto Networks Expedition Migration tool up to version 1.1.8.
5
Can CVE-2019-1571 be exploited remotely?
CVE-2019-1571 can only be exploited by an authenticated user with access to the RADIUS server settings.