A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is not required when binding the Inspector instance to a different customer tenant.
References
Link | Resource |
---|---|
https://security.paloaltonetworks.com/CVE-2019-15018 | Third Party Advisory |
Configurations
Information
Published : 2019-10-09 14:15
Updated : 2023-02-14 18:35
NVD link : CVE-2019-15018
Mitre link : CVE-2019-15018
JSON object : View
CWE
CWE-306
Missing Authentication for Critical Function
Products Affected
zingbox
- inspector