Hardcoded credentials

2019-01-3020:29:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

22.1%

JSON

The PAN-OS external dynamics lists in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an attacker that is authenticated in Next Generation Firewall with write privileges to External Dynamic List configuration to inject arbitrary JavaScript or HTML.

CPENameOperatorVersion
pan-osge8.0.15
pan-osle8.1.5
pan-osge7.1.22
pan-osle8.0.14
pan-osle7.1.21

Name	Operator	Version
pan-os	ge	8.0.15
pan-os	le	8.1.5
pan-os	ge	7.1.22
pan-os	le	8.0.14
pan-os	le	7.1.21

References

www.securityfocus.com/bid/106752

security.paloaltonetworks.com/CVE-2019-1565