CVE-2019-15021

Name of the Vulnerable Software and Affected Versions ZingBox Inspector versions 1.294 and earlier

Description The issue is related to a lack of protection for service data in the network traffic handler. This can be exploited by a remote attacker to perform a Server-Side Request Forgery (SSRF) attack. Additionally, the vulnerability can allow an attacker to easily identify instances of Zingbox Inspectors in a local area network.

Recommendations For ZingBox Inspector versions 1.294 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.