What is CVE-2020-1977?

CVE-2020-1977 is a security advisory published by Palo Alto Networks Security Advisories with High severity. CVE-2020-1977 Expedition Migration Tool: Insufficient Cross Site Request Forgery protection.

Which CVE IDs does CVE-2020-1977 cover?

CVE-2020-1977 covers the following CVE IDs: CVE-2020-1977. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2020-1977?

CVE-2020-1977 affects 1 product, including: Expedition.

CVE-2020-1977High

CVE-2020-1977 Expedition Migration Tool: Insufficient Cross Site Request Forgery protection.

Vendor

Palo Alto Networks Security Advisories

Published

February 12, 2020

Last Modified

February 12, 2020

🔗 CVE IDs covered (1)

CVE-2020-1977 →

📋 Description

Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier versions.

🎯 Affected products1

Expedition

✅ Remediation

This issue is fixed in Expedition Migration Tool 1.1.52 and later versions. Workarounds and mitigations: To prevent the chance of malicious websites making forged requests to Expedition Migration Tool, you should access the tool exclusively from a web browser and log out after each use.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2020-1977