Unrated severityNVD Advisory· Published Feb 12, 2020· Updated Sep 17, 2024

Expedition Migration Tool: Insufficient Cross Site Request Forgery protection.

CVE-2020-1977

Description

Insufficient Cross-Site Request Forgery (XSRF) protection on Expedition Migration Tool allows remote unauthenticated attackers to hijack the authentication of administrators and to perform actions on the Expedition Migration Tool. This issue affects Expedition Migration Tool 1.1.51 and earlier versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Paloaltonetworks/Expedition Migration Toolllm-create
Range: <=1.1.51
Paloaltonetworks/Expeditioncpe-rescue
Range: 1.1

Patches

Vulnerability mechanics

References

security.paloaltonetworks.com/CVE-2020-1977mitrex_refsource_MISC
www.tenable.com/security/research/tra-2020-11mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000