CVE-2020-13460

概要

参考情報

• Accenture/AARO-Bugs · Third Party Advisory

securetrack のその他の脆弱性

• CVE-2020-13462中 5.7Insecure Direct Object Reference (IDOR) exists in Tufin SecureChange, affecting all versions prior to R20-2 GA. Fixed in version R20-2 GA.
• CVE-2020-13409中 5.9Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the …
• CVE-2020-13408中 5.9Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the …
• CVE-2020-13407中 5.9Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the …
• CVE-2018-18406緊急 9.9An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final). The Audit Report module is affected by a blind XXE vu…