Not rated
CVE-2019-15018 A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is not…
Description
A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is not required when binding the Inspector instance to a different customer tenant.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Palo Alto Networks Zingbox Inspector | Versions not published |
References
- security.paloaltonetworks.com security.paloaltonetworks.com
Timeline
- Published
- Last modified
Other CVEs of Palo Alto Networks Zingbox Inspector
The 11 CVEs of Palo Alto Networks Zingbox Inspector →
CVE-2019-15017
The SSH service is enabled on the Zingbox Inspector versions 1.294 and earlier, exposing SSH to the local network
Not rated
CVE-2019-15015
In the Zingbox Inspector, versions 1.294 and earlier, hardcoded credentials for root and inspector user accounts are…
Not rated
CVE-2019-15016
An SQL injection vulnerability exists in the management interface of Zingbox Inspector versions 1.288 and earlier,…
Not rated
CVE-2019-15014
A command injection vulnerability exists in the Zingbox Inspector versions 1.286 and earlier, that allows for an…
Not rated