Information about PAN-OS Finding

ID PAN-SA-2019-0011
Type paloalto
Reporter Palo Alto Networks Product Security Incident Response Team
Modified 2019-05-16T00:00:00


An issue was resolved in PAN-OS that resulted in configured Layer 3 interfaces erroneously opening ports 28869/tcp and 28870/tcp on the IP address assigned to the Layer 3 interface, which bind to an internal service that performs HTTP 301 redirection to the HTTPS port (443/tcp) on the same interface IP address. There are no known vulnerabilities or immediate security risks posed by this issue; however customers are advised to review this issue and determine the appropriate next steps. (Refer to PAN-94058 and PAN-101704 in the release notes associated with your release: