CVE-2020-1977

Expedition Migration Tool: Insufficient Cross Site Request Forgery protection.

CVSS 7.5 HIGHEPSS 0.5%CWE-352

Vexday Risk Score

21Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 7.5EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

12 feb 2020Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier versions.

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

Productos afectados

Palo Alto Networks · Expedition

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://security.paloaltonetworks.com/CVE-2020-1977 https://www.tenable.com/security/research/tra-2020-11