CVE-2019-1583

HighCVSS 8.0/10Last modified Jun 17, 2026

Description

Escalation of privilege vulnerability in the Palo Alto Networks Twistlock console 19.07.358 and earlier allows a Twistlock user with Operator capabilities to escalate privileges to that of another user. Active interaction with an affected component is required for the payload to execute on the victim.

Metrics

CVSS 3.0 8.0/10CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published: Aug 23, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-158305.4The icegram plugin before 1.10.29 for WordPress has ig_cat_list XSS.CVE-2019-158318.8The visitors-traffic-real-time-statistics plugin before 1.12 for WordPress has CSRF in the settings page.CVE-2019-158328.8The visitors-traffic-real-time-statistics plugin before 1.13 for WordPress has CSRF.CVE-2019-158336.1The simple-mail-address-encoder plugin before 1.7 for WordPress has reflected XSS.CVE-2019-158348.8The webp-converter-for-media plugin before 1.0.3 for WordPress has CSRF.CVE-2019-158358.8The wp-better-permalinks plugin before 3.0.5 for WordPress has CSRF.CVE-2019-158365.4The wp-ultimate-recipe plugin before 3.12.7 for WordPress has stored XSS.CVE-2019-158375.4The webp-express plugin before 0.14.8 for WordPress has stored XSS.CVE-2019-158386.1The custom-404-pro plugin before 3.2.8 for WordPress has reflected XSS, a different vulnerability than CVE-2019-14789.CVE-2019-158397.5The sina-extension-for-elementor plugin before 2.2.1 for WordPress has local file inclusion.CVE-2019-15849.8A security vulnerability exists in Zingbox Inspector version 1.293 and earlier, that allows for remote code execution if the Inspector were CVE-2019-158408.8The facebook-for-woocommerce plugin before 1.9.14 for WordPress has CSRF.