Palo Alto PAN-OS XSS Vulnerability (PAN-SA-2017-0011)

# SPDX-FileCopyrightText: 2017 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

CPE = "cpe:/o:paloaltonetworks:pan-os";

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.107161");
  script_version("2026-04-28T06:28:06+0000");
  script_tag(name:"last_modification", value:"2026-04-28 06:28:06 +0000 (Tue, 28 Apr 2026)");
  script_tag(name:"creation_date", value:"2017-05-02 14:04:20 +0200 (Tue, 02 May 2017)");
  script_cve_id("CVE-2017-7409");

  script_tag(name:"cvss_base", value:"4.3");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:N/I:P/A:N");
  script_tag(name:"severity_vector", value:"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2017-07-11 01:33:00 +0000 (Tue, 11 Jul 2017)");

  script_tag(name:"qod_type", value:"package");

  script_name("Palo Alto PAN-OS XSS Vulnerability (PAN-SA-2017-0011)");

  script_tag(name:"summary", value:"Palo Alto PAN-OS is prone to a cross-site scripting (XSS)
  vulnerability because it fails to properly sanitize user-supplied input.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable version is present on the target host.");

  script_tag(name:"insight", value:"The bug is due to unappropiate validation of specific request
  parameters from PANS-OS.");

  script_tag(name:"impact", value:"An attacker may leverage this issue to execute arbitrary script
  code in the browser of an unsuspecting user in the context of the affected site. This may let the
  attacker steal cookie-based authentication credentials and launch other attacks.");
  script_tag(name:"affected", value:"PAN-OS 7.0.14 and earlier.");

  script_tag(name:"solution", value:"Update to PAN-OS 7.0.15 and later.");

  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/97953");
  script_xref(name:"URL", value:"https://security.paloaltonetworks.com/CVE-2017-7409");
  script_tag(name:"solution_type", value:"VendorFix");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2017 Greenbone AG");
  script_family("Palo Alto PAN-OS Local Security Checks");
  script_dependencies("gb_paloalto_panos_consolidation.nasl");
  script_mandatory_keys("palo_alto_pan_os/version");

  exit(0);
}

include("host_details.inc");
include("version_func.inc");

if(!ver = get_app_version(cpe:CPE, nofork:TRUE))
  exit(0);

if(ver =~ "^7\.0" && version_is_less(version:ver, test_version:"7.0.15")) {
  report = report_fixed_ver(installed_version:ver, fixed_version:"7.0.15");

  model = get_kb_item( "palo_alto_pan_os/model" );
  if(model)
    report += '\nModel:              ' + model;

  security_message(port:0, data:report);
  exit(0);
}

exit(99);