CVE-2024-9463

An OS command injection vulnerability in Palo Alto Networks Expedition allows an unauthenticated attacker to run arbitrary OS commands as root in Expedition, resulting in disclosure of usernames, cleartext passwords, device configurations, and device API keys of PAN-OS firewalls. Recent...

PT-2024-8335

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions prior to 10.1.14 Palo Alto Networks PAN-OS versions prior to 10.2.12 Palo Alto Networks PAN-OS versions prior to 11.0.6 Palo Alto Networks PAN-OS versions prior to 11.1.5 Palo Alto Networks PAN-OS versions...

PT-2024-7513 · Palo Alto Networks · Pan-Os

Name of the Vulnerable Software and Affected Versions: PAN-OS affected versions not specified Description: A memory corruption issue in PAN-OS software allows an unauthenticated attacker to crash the system due to a crafted packet through the data plane, resulting in a denial of service DoS...

PT-2024-8243

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions prior to 10.2.12 Palo Alto Networks PAN-OS versions prior to 11.0.6 Palo Alto Networks PAN-OS versions prior to 11.1.5 Palo Alto Networks PAN-OS versions prior to 11.2.4 Description An authentication bypass i...

CVE-2024-8686

A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as root on the firewall...

CVE-2024-8686

A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as root on the firewall...

CVE-2024-8688

An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface CLI enables authenticated administrators including read-only administrators with access to the CLI to to read arbitrary files on the firewall...

CVE-2024-8691

A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated GlobalProtect user to impersonate another GlobalProtect user. Active GlobalProtect users impersonated by an attacker who is exploiting this vulnerability are disconnected from...

CVE-2024-8687

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstal...

CVE-2024-8687

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstal...

CVE-2024-8691 PAN-OS: User Impersonation in GlobalProtect Portal

A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated GlobalProtect user to impersonate another GlobalProtect user. Active GlobalProtect users impersonated by an attacker who is exploiting this vulnerability are disconnected from...

CVE-2024-8691

CVE-2024-8691 affects Palo Alto Networks PAN-OS GlobalProtect portal. A malicious authenticated GlobalProtect user can impersonate another GlobalProtect user. Impact: impersonation is possible; affected users are disconnected during exploitation, and PAN-OS logs show the impersonated user authent...

CVE-2024-8691 PAN-OS: User Impersonation in GlobalProtect Portal

A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated GlobalProtect user to impersonate another GlobalProtect user. Active GlobalProtect users impersonated by an attacker who is exploiting this vulnerability are disconnected from...

CVE-2024-8688 PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)

An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface CLI enables authenticated administrators including read-only administrators with access to the CLI to to read arbitrary files on the firewall...

CVE-2024-8688 PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)

An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface CLI enables authenticated administrators including read-only administrators with access to the CLI to to read arbitrary files on the firewall...

CVE-2024-8688

CVE-2024-8688: A local, authenticated-admin vulnerability in Palo Alto Networks PAN-OS CLI allows reading arbitrary files on the firewall via improper neutralization of matching symbols. Affected PAN-OS versions include PAN-OS 9.1.x before 9.1.15, 10.0.x before 10.0.10, and 10.1.x before 10.1.1 (...

CVE-2024-8687

CVE-2024-8687 affects Palo Alto Networks PAN-OS (GlobalProtect) and results in cleartext exposure of the uninstall password and the disable/disconnect passcode. This information exposure enables a user to uninstall, disable, or disconnect GlobalProtect even if the app config would ordinarily prev...

CVE-2024-8687 PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstal...

CVE-2024-8686

CVE-2024-8686 affects Palo Alto Networks PAN-OS software. A command-injection vulnerability allows an authenticated administrator to bypass system restrictions and run arbitrary commands as root on the firewall. Documentation consistently describes the issue as exploitable by an authenticated adm...

PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)

An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface CLI enables authenticated administrators including read-only administrators with access to the CLI to to read arbitrary files on the firewall. Work around: No work around available...