Unscored CVE-2019-1571 EUVD-2019-10128GHSA-4qhh-6cpg-6632

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS serve…

Published Mar 26, 2019 · Updated Aug 4, 2024 · Assigned by palo_alto

Vendor: Palo Alto Networks Product: Palo Alto Networks Expedition Migration Tool Category: Network devices

Description

The Expedition Migration tool 1.1.8 and earlier may allow an authenticated attacker to run arbitrary JavaScript or HTML in the RADIUS server settings.

Affected products

Vendor	Product	Affected	Fixed
Palo Alto	Palo Alto Networks Expedition Migration Tool	Expedition 1.1.8 and earlier	—

References

https://securityadvisories.paloaltonetworks.com/Home/Detail/142
https://www.tenable.com/security/research/tra-2019-13
107564 vdb-entry