Hardcoded credentials

2019-01-3020:29:00

PRIOn knowledge base

www.prio-n.com

6.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.7%

JSON

The PAN-OS management web interface in PAN-OS 7.1.21 and earlier, PAN-OS 8.0.14 and earlier, and PAN-OS 8.1.5 and earlier, may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML.

CPENameOperatorVersion
pan-osge7.1.0
pan-oslt7.1.22
pan-osge8.0.0
pan-oslt8.0.15
pan-osge8.1.0
pan-oslt8.1.6

Name	Operator	Version
pan-os	ge	7.1.0
pan-os	lt	7.1.22
pan-os	ge	8.0.0
pan-os	lt	8.0.15
pan-os	ge	8.1.0
pan-os	lt	8.1.6

References

www.securityfocus.com/bid/106750

security.paloaltonetworks.com/CVE-2019-1566

www.purplemet.com/blog/palo-alto-firewall-multiple-xss-vulnerabilities