Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 30122 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.0.3 an...

LDAP Passwords Logged in Clear Text

An issue exists whereby LDAP bind passwords are logged to authd.log in clear text when using the default logging level of 'debug'. Ref 35493 This issue results in administrator passwords being logged and stored in clear text. Inappropriate access to this information can lead to unauthorized...

Command Injection Vulnerability

A vulnerability exists whereby an unauthenticated user can inject commands as root on the device. Ref 31091 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.0.4 and earlier; PAN-OS 3.1.9 and earlier. Work...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 33476 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.1.0 an...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can execute arbitrary code as root using the device management command line interface. Ref 35249 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.0.8 and...

Management Server DOS Vulnerability

An issue exists whereby the management server of the device can be crashed when an authenticated users sends a specially crafted command via the command line interface. Ref 35254 This issue results in the unavailability of the management server of the device. The attacker must be an authenticated...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 34595 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. The attacker must still be an...

Command Injection Vulnerability

A vulnerability exists whereby an unauthenticated user can inject commands as root on the device. Ref 31091 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.0.4 and earlier; PAN-OS 3.1.9 and earlier. Work...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can inject arbitrary shell commands using the device management command line interface. Ref 34299 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. The attacker must still be an...

Verbose Error Messages

Under certain conditions, when unexpected input is provided to the web-based management UI, overly verbose error information is delivered back to the client. This does not directly result in any specific vulnerability, however this information is helpful to an attacker. Ref 33139 This issue resul...

Command Injection Vulnerability

A vulnerability exists whereby an authenticated user can execute arbitrary code as root using the device management command line interface. Ref 34896 This vulnerability can result in arbitrary command execution, and can result in total compromise of the device. This issue affects PAN-OS 4.0.8 and...

PT-2012-6285

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.x and earlier, 4.0.x through 4.0.8, 4.1.x through 4.1.2 Description The issue allows context-dependent attackers to obtain sensitive information by reading the authd.log file, where cleartext LDAP bind...

PT-2012-6290

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.11 and earlier Palo Alto Networks PAN-OS versions 4.0.9 and earlier Palo Alto Networks PAN-OS versions 4.1.3 and earlier Description A vulnerability exists in the device-management command-line interface,...

PT-2012-6279

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 4.0.0 through 4.0.7 Description The web-based management UI in the affected versions of PAN-OS allows remote attackers to obtain overly verbose error information via crafted input. This issue does not directl...

PT-2012-6287

Name of the Vulnerable Software and Affected Versions PAN-OS versions 4.0.0 through 4.0.7 Description A vulnerability exists in the device-management command-line interface, allowing remote authenticated users to execute arbitrary commands. This can result in arbitrary command execution and total...

PT-2012-6292

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.11 and earlier Palo Alto Networks PAN-OS versions 4.0.9 and earlier Palo Alto Networks PAN-OS versions 4.1.3 and earlier Description A vulnerability exists in the web management UI, allowing remote...

PT-2012-6282

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.9 and earlier Palo Alto Networks PAN-OS versions 4.0.3 and earlier Description A vulnerability exists that allows an unauthenticated user to inject commands as root on the device, resulting in arbitrary...

PT-2012-6288

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.0.x and earlier are not affected, but the following are: PAN-OS versions 4.0.0 through 4.0.7 PAN-OS versions 4.1.0 Description A vulnerability exists in the device-management command-line interface, allowin...

PT-2012-6286

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.10 and earlier Palo Alto Networks PAN-OS versions 4.0.8 and earlier Description The issue allows remote authenticated users to cause a denial of service by sending a specially crafted command via the...

PT-2012-6281

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.9 and earlier Palo Alto Networks PAN-OS versions 4.0.4 and earlier Description A vulnerability exists that allows an unauthenticated user to inject commands as root on the device, resulting in arbitrary...