What is CVE-2019-1577?

CVE-2019-1577 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. CVE-2019-1577 Code Injection Vulnerability in Traps

Which CVE IDs does CVE-2019-1577 cover?

CVE-2019-1577 covers the following CVE IDs: CVE-2019-1577. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2019-1577?

CVE-2019-1577 affects 1 product, including: Traps.

CVE-2019-1577Medium

CVE-2019-1577 Code Injection Vulnerability in Traps

Vendor

Palo Alto Networks Security Advisories

Published

June 27, 2019

Last Modified

June 27, 2019

🔗 CVE IDs covered (1)

CVE-2019-1577 →

📋 Description

Code injection vulnerability exists in the Palo Alto Networks Traps. (Ref: CVE-2019-1577) Successful exploitation of this issue may allow an authenticated attacker to inject arbitrary JavaScript or HTML. This issue affects Traps 5.0.5 and earlier, including all 4.x releases. These releases did not have the file protection (SPROT) enabled by default. Traps 5.0.6, 6.0 and later are NOT affected.

🎯 Affected products1

Traps

✅ Remediation

Traps 5.0.6 and later Workarounds and mitigations: Configure Agent Security options that prevent unauthorized access or tampering with Traps components. Instructions are located on (see step 6) https://docs.paloaltonetworks.com/traps/tms/traps-management-service-admin/manage-endpoint-policy/traps-profiles/add-agent-settings-profile

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2019-1577