CVE-2024-8691

CVE-2024-8691 affects Palo Alto Networks PAN-OS GlobalProtect portal. A malicious authenticated GlobalProtect user can impersonate another GlobalProtect user. Impact: impersonation is possible; affected users are disconnected during exploitation, and PAN-OS logs show the impersonated user authent...

CVE-2024-8691 PAN-OS: User Impersonation in GlobalProtect Portal

A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated GlobalProtect user to impersonate another GlobalProtect user. Active GlobalProtect users impersonated by an attacker who is exploiting this vulnerability are disconnected from...

CVE-2024-8688 PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)

An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface CLI enables authenticated administrators including read-only administrators with access to the CLI to to read arbitrary files on the firewall...

CVE-2024-8688

CVE-2024-8688: A local, authenticated-admin vulnerability in Palo Alto Networks PAN-OS CLI allows reading arbitrary files on the firewall via improper neutralization of matching symbols. Affected PAN-OS versions include PAN-OS 9.1.x before 9.1.15, 10.0.x before 10.0.10, and 10.1.x before 10.1.1 (...

CVE-2024-8688 PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)

An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface CLI enables authenticated administrators including read-only administrators with access to the CLI to to read arbitrary files on the firewall...

CVE-2024-8687 PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstal...

CVE-2024-8687

CVE-2024-8687 affects Palo Alto Networks PAN-OS (GlobalProtect) and results in cleartext exposure of the uninstall password and the disable/disconnect passcode. This information exposure enables a user to uninstall, disable, or disconnect GlobalProtect even if the app config would ordinarily prev...

CVE-2024-8686

CVE-2024-8686 affects Palo Alto Networks PAN-OS software. A command-injection vulnerability allows an authenticated administrator to bypass system restrictions and run arbitrary commands as root on the firewall. Documentation consistently describes the issue as exploitable by an authenticated adm...

PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)

An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface CLI enables authenticated administrators including read-only administrators with access to the CLI to to read arbitrary files on the firewall. Work around: No work around available...

PAN-OS: User Impersonation in GlobalProtect Portal

A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated GlobalProtect user to impersonate another GlobalProtect user. Active GlobalProtect users impersonated by an attacker who is exploiting this vulnerability are disconnected from...

PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstal...

PAN-OS: Command Injection Vulnerability

A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as root on the firewall. Work around: TBD...

Palo Alto Networks PAN-OS 11.2.x < 11.2.3 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 11.2.x prior to 11.2.3. It is, therefore, affected by a vulnerability. A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run...

Palo Alto Networks PAN-OS 9.1.x < 9.1.15 / 10.0.x < 10.0.10 / 10.1.x < 10.1.1 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 9.1.x prior to 9.1.15 or 10.0.x prior to 10.0.10 or 10.1.x prior to 10.1.1. It is, therefore, affected by a vulnerability. An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command...

Palo Alto Networks PAN-OS 8.1.x < 8.1.25 / 9.0.x < 9.0.17 / 9.1.x < 9.1.16 / 10.0.x < 10.0.12 / 10.1.x < 10.1.9 / 10.2.x < 10.2.4 / 11.0.x < 11.0.1 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.25 or 9.0.x prior to 9.0.17 or 9.1.x prior to 9.1.16 or 10.0.x prior to 10.0.12 or 10.1.x prior to 10.1.9 or 10.2.x prior to 10.2.4 or 11.0.x prior to 11.0.1. It is, therefore, affected by a vulnerability. A...

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A security vulnerability exists in Palo Alto Networks PAN-OS that originates from a malicious authenticated GlobalProtect user being able to impersonate other GlobalProtect users...

Palo Alto Networks PAN-OS 9.1.x < 9.1.17 / 10.1.x < 10.1.11 Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 9.1.x prior to 9.1.17 or 10.1.x prior to 10.1.11. It is, therefore, affected by a vulnerability. A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated GlobalProtect...

Informational Bulletin: Impact of OpenSSL Vulnerabilities CVE-2024-5535 and CVE-2024-6119

The Palo Alto Networks Product Security Assurance team has evaluated CVE-2024-5535 and CVE-2024-6119 as they relate to our products. PAN-OS, Cloud NGFW, Prisma Access, and Cortex XDR Agent are not affected by CVE-2024-5535 or CVE-2024-6119. At present, no other Palo Alto Networks products are kno...

The vulnerability of the PAN-OS operating system in the centralized network switch management system of Palo Alto Networks Panorama allows a attacker to trigger a service failure.

The vulnerability of the PAN-OS operating system in the Palo Alto Networks Panorama network switch management system is related to the ability to download unlimited files of a malicious nature. Exploiting this vulnerability allows a malicious actor to cause service interruptions by downloading...

CVE-2024-5916

An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to unintentionally disclose secrets, passwords, and tokens of external systems. A read-only administrator who has access to the config log, can read secrets, passwords, and tokens to...