Vulnerabilitymedium

Enterprise VPN apps store authentication and session cookies insecurely

Help Net Securityby @zeljkazorzApr 12, 2019 · 00:00 UTC (Apr 12, 2019)1 min read3

Read at helpnetsecurity.com

Analyze CVE-2019-1573 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2019-1573

Tags: cve-2019-1573 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2019-1573	GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow a local authenticated attacker who has compromised the…	2.5	<1%		Apr 9, 2019

From the original article

1 min read at helpnetsecurity.com

CVE-2019-1573, a flaw that makes VPN applications store the authentication and/or session cookies insecurely (i. e. unencrypted) in memory and/or log files, affects a yet to be determined number of enterprise Virtual Private Network (VPN) applications.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.