CVE-2020-13407

Tufin SecureTrack

CVE-2020-13409

CVE-2020-13409 affects Tufin SecureTrack (R20-2 GA). The issue combines reflected and stored cross-site scripting: payloads are reflected to the user and also stored in the database, enabling re-triggering by the same or other users. Documents indicate that an admin can be targeted and that malic...

CVE-2020-13408

The CVE-2020-13408 entry concerns Tufin SecureTrack (R20-2 GA). The vulnerability is a combined reflected and stored XSS, where payloads are reflected to users and stored in the DB, enabling repetition by the same or other users. The impact notes that an attacker—potentially non-authenticated or ...

Tufin SecureTrack R20-2 GA Cross-Site Request Forgery Vulnerability

USA Tufin SecureTrack is a firewall policy management platform from Tufin USA USA. A cross-site request forgery vulnerability exists in the Tufin SecureTrack R20-2 GA, which arises from a web application that does not adequately validate that a request is coming from a trusted user. An attacker...