CVE-2020-13460

Description

References

• Accenture/AARO-Bugs · Third Party Advisory

Altre vulnerabilità di securetrack

• CVE-2020-13462MEDIO 5.7Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA. Fixed in version R20-2 GA.
• CVE-2020-13409MEDIO 5.9Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the …
• CVE-2020-13408MEDIO 5.9Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the …
• CVE-2020-13407MEDIO 5.9Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the …
• CVE-2018-18406CRITICO 9.9An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final). The Audit Report module is affected by a blind XXE vu…