CVE-2019-15018

HIGH

Zingbox Inspector < 1.280 - Unauthenticated Tenant Binding

Title source: llm
STIX 2.1

Description

A security vulnerability exists in the Zingbox Inspector versions 1.280 and earlier, where authentication is not required when binding the Inspector instance to a different customer tenant.

References (1)

Core 1
Core References
Third Party Advisory x_refsource_misc
https://security.paloaltonetworks.com/CVE-2019-15018

Scores

CVSS v3 7.5
EPSS 0.0118
EPSS Percentile 63.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Details

CWE
CWE-306
Status published
Products (1)
zingbox/inspector < 1.280
Published Oct 09, 2019
Tracked Since Feb 18, 2026