A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is not required when binding the Inspector instance to a different customer tenant.
References
Link | Resource |
---|---|
https://security.paloaltonetworks.com/CVE-2019-15018 | Third Party Advisory |
Configurations
History
15 Feb 2023, 02:35
Type | Values Removed | Values Added |
---|---|---|
References | (MISC) https://security.paloaltonetworks.com/CVE-2019-15018 - Third Party Advisory |
Information
Published : 2019-10-09 21:15
Updated : 2023-12-10 13:13
NVD link : CVE-2019-15018
Mitre link : CVE-2019-15018
CVE.ORG link : CVE-2019-15018
JSON object : View
Products Affected
zingbox
- inspector
CWE
CWE-306
Missing Authentication for Critical Function