CVE-2019-15018

CVE-2019-15018 affects Palo Alto Networks Zingbox Inspector (versions 1.280 and earlier). The root cause is an authentication bypass when binding the Inspector to a different customer tenant, enabling potential cross-tenant access. Impact is described as a security-bypass affecting the binding fu...

Tenant authentication bypass in Zingbox Inspector

A security vulnerability exists in the Zingbox Inspector where authentication is not required when binding the Inspector instance to a different customer tenant. Ref: CVE-2019-15018 The vulnerability allows a user to bind the Zingbox Inspector to another tenant, which can impact the functionality...

Palo Alto Networks Zingbox Inspector CVE-2019-15018 Security Bypass Vulnerability

Description Palo Alto Networks Zingbox Inspector is prone to a security-bypass vulnerability Attackers can exploit this issue to bypass certain security restrictions and perform unauthorized actions. This may aid in further attacks. Versions prior to Zingbox Inspector 1.281 are vulnerable...