Palo Alto Networks Demisto CVE-2019-1568 Cross Site Scripting Vulnerability
BID:108255
Info
Palo Alto Networks Demisto CVE-2019-1568 Cross Site Scripting Vulnerability
| Bugtraq ID: | 108255 |
| Class: | Input Validation Error |
| CVE: |
CVE-2019-1568 |
| Remote: | Yes |
| Local: | No |
| Published: | May 06 2019 12:00AM |
| Updated: | May 06 2019 12:00AM |
| Credit: | Mihalis Haatainen and Tomi Lindfors of Optimesys |
| Vulnerable: |
Paloaltonetworks Demisto 4.5 build 40249 |
| Not Vulnerable: |
Paloaltonetworks Demisto 4.5 build 40589 |
Discussion
Palo Alto Networks Demisto CVE-2019-1568 Cross Site Scripting Vulnerability
Palo Alto Networks Demisto is prone to an unspecified cross-site scripting vulnerability.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Demisto 4.5 build 40249 is vulnerable; other versions may also be affected.
Palo Alto Networks Demisto is prone to an unspecified cross-site scripting vulnerability.
An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.
Demisto 4.5 build 40249 is vulnerable; other versions may also be affected.
Exploit / POC
Palo Alto Networks Demisto CVE-2019-1568 Cross Site Scripting Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].