CVE-2020-13462

概要

参考情報

• Accenture/AARO-Bugs · Third Party Advisory

securetrack のその他の脆弱性

• CVE-2020-13460高 8.8Multiple Cross-Site Request Forgery (CSRF) vulnerabilities were present in Tufin SecureTrack, affecting all versions prior to R20-2 GA.
• CVE-2020-13409中 5.9Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the …
• CVE-2020-13408中 5.9Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the …
• CVE-2020-13407中 5.9Tufin SecureTrack < R20-2 GA contains reflected + stored XSS (as in, the value is reflected back to the user, but is also stored within the …
• CVE-2018-18406緊急 9.9An issue was discovered in Tufin SecureTrack 18.1 with TufinOS 2.16 build 1179(Final). The Audit Report module is affected by a blind XXE vu…