CVE-2019-1571

EPSS 1.1%

Vexday Risk Score

3Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS —EPSS 1.1%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

26 Mar 2019Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings.

Affected products

Palo Alto · Palo Alto Networks Expedition Migration Tool

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://securityadvisories.paloaltonetworks.com/Home/Detail/142 https://www.tenable.com/security/research/tra-2019-13 http://www.securityfocus.com/bid/107564