CVE-2019-15018 Missing authorization in Palo Alto Networks Zingbox Inspector
Attackers can bind the Inspector to a different tenant without authentication, potentially accessing unauthorized data or taking over accounts.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2019-15018?
CVE-2019-15018 is a high-severity missing authorization vulnerability in Palo Alto Networks Zingbox Inspector, published on 9 Oct 2019. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is not required when binding the Inspector instance to a different customer tenant.
Weakness: CWE-306
Which versions are affected by CVE-2019-15018?
It affects 1 product.
Products include Zingbox Inspector.
How do I fix CVE-2019-15018?
No fix has been published for CVE-2019-15018 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2019-15018 being exploited?
There is no known exploitation of CVE-2019-15018 in the wild and no public exploit code.
Other vulnerabilities in Palo Alto Networks Zingbox Inspector
- CVE-2019-15019 Other in Palo Alto Networks Zingbox Inspector
- CVE-2019-15020 Command injection in Palo Alto Networks Zingbox Inspector
- CVE-2019-1584 Command injection in Palo Alto Networks Zingbox Inspector
- CVE-2019-15014 Command injection in Palo Alto Networks Zingbox Inspector
- CVE-2019-15016 SQL injection in Palo Alto Networks Zingbox Inspector
Sources
Also known as GHSA-jgh2-4wjp-h8w8.