PT-2020-5492 · Openssl +4 · Openssl +4

Name of the Vulnerable Software and Affected Versions: OpenSSL versions 1.0.2 through 1.0.2v PAN-OS software versions earlier than 10.0 Description: The issue is related to a flaw in the TLS specification that can lead to an attacker being able to compute the pre-master secret in connections whic...

Design/Logic Flaw

When SSL/TLS Forward Proxy Decryption mode has been configured to decrypt the web transactions, the PAN-OS URL filtering feature inspects the HTTP Host and URL path headers for policy enforcement on the decrypted HTTPS web transactions but does not consider Server Name Indication SNI field within...

CVE-2020-2035 PAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessions

When SSL/TLS Forward Proxy Decryption mode has been configured to decrypt the web transactions, the PAN-OS URL filtering feature inspects the HTTP Host and URL path headers for policy enforcement on the decrypted HTTPS web transactions but does not consider Server Name Indication SNI field within...

CVE-2020-2035

CVE-2020-2035 (PAN-OS) affects PAN-OS when SSL/TLS Forward Proxy Decryption is enabled. The URL filtering policy inspects HTTP Host/URL path but ignores the TLS Client Hello SNI, allowing a compromised host to evade policies on decrypted HTTPS traffic. Impact is described as low for integrity; no...

PAN-OS: URL filtering policy is not enforced on TLS handshakes for decrypted HTTPS sessions

When SSL/TLS Forward Proxy Decryption mode has been configured to decrypt the web transactions, the PAN-OS URL filtering feature inspects the HTTP Host and URL path headers for policy enforcement on the decrypted HTTPS web transactions but does not consider Server Name Indication SNI field within...

The vulnerability of the PAN-OS operating system on PA-7000 devices, related to insufficient channel restrictions for specified endpoints, allows a perpetrator to gain access to the device with root privileges.

The vulnerability of the PAN-OS operating system on PA-7000 devices is related to insufficient restrictions on communication channels for specified endpoints. Exploiting this vulnerability can allow a malicious actor to gain access to the device with root privileges...

The vulnerability of the PAN-OS operating system, related to deficiencies in authentication procedures, allows attackers to gain superuser privileges.

The vulnerability of the PAN-OS operating system is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain superuser privileges...

The vulnerability of the logd daemon in the PAN-OS operating system allows a perpetrator to execute arbitrary code and increase their privileges.

The vulnerability of logd daemon in the PAN-OS operating system is related to the use of an uncontrolled format string. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely and gain elevated privileges...

The vulnerability of the PAN-OS operating system, related to incorrect restrictions on XML links to external objects, allows attackers to escalate their privileges.

The vulnerability of the PAN-OS operating system is related to incorrect restrictions on XML links to external objects. Exploiting this vulnerability can allow a malicious actor, operating remotely, to increase their privileges...

Palo Alto Networks PAN-OS Encryption Issue Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. A cryptographic issue vulnerability exists in Palo Alto Networks PAN-OS that stems from the program's use of a weak encryption protocol, TLS version 1.0. An attacker could exploit this...

Palo Alto Networks PAN-OS OS Command Injection Vulnerability (CNVD-2021-22171)

PAN-OS is an operating system designed specifically for security and control of Palo Alto Networks firewalls, with extensive firewall, management and network features. An OS command injection vulnerability exists in the Palo Alto Networks PAN-OS management interface. An attacker could exploit thi...

Palo Alto Networks PAN-OS OS Command Injection Vulnerability

PAN-OS is an operating system designed specifically for the security and control of Palo Alto Networks firewalls, with a rich set of firewall, management and network features. An OS command injection vulnerability exists in the GlobalProtect portal of PAN-OS. An attacker can exploit this...

Palo Alto Networks PAN-OS 9.1.x < 9.1.3 Integer Underflow Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 9.1.x prior to 9.1.3. It is, therefore, affected by an integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface. This allows authenticated administrators to issue a command from the command...

Palo Alto Networks PAN-OS 8.x < 8.1.15 / 9.0.x < 9.0.9 / 9.1.x < 9.1.3 TLS 1.0 Usage Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 8.x prior to 8.1.15 or 9.0.x prior to 9.0.9 or 9.1.x prior to 9.1.3. It is, therefore, affected by a TLS 1.0 usage vulnerability. Certain communication between PAN-OS and cloud-delivered services inadvertently use TLS 1.0, whi...

Palo Alto Networks PAN-OS 7.1.x / 8.x < 8.1.15 OS Command Injection Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x or 8.x prior to 8.1.15. It is, therefore, affected by a OS command injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges...

Palo Alto Networks PAN-OS 7.1.x < 8.1.15 / 9.0.x < 9.0.9 / 9.1.x < 9.1.3 GlobalProtect Command Injection Vulnerability

The version of Palo Alto Networks PAN-OS running on the remote host is 7.1.x prior to 8.1.15 or 9.0.x prior to 9.0.9 or 9.1.x prior to 9.1.3. It is, therefore, affected by a command injection vulnerability exists in the GlobalProtect portal. An unauthenticated, remote attacker can exploit this, t...

CVE-2020-2034

An OS Command Injection vulnerability in the PAN-OS GlobalProtect portal allows an unauthenticated network based attacker to execute arbitrary OS commands with root privileges. An attacker requires some knowledge of the firewall to exploit this issue. This issue can not be exploited if...

CVE-2020-2030

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.15; and all versions of PAN-OS 7.1 and PAN-OS 8.0. This issue doe...

CVE-2020-2031

An integer underflow vulnerability in the dnsproxyd component of the PAN-OS management interface allows authenticated administrators to issue a command from the command line interface that causes the component to stop responding. Repeated attempts to send this request result in denial of service ...

CVE-2020-2030

An OS Command Injection vulnerability in the PAN-OS management interface that allows authenticated administrators to execute arbitrary OS commands with root privileges. This issue impacts PAN-OS 8.1 versions earlier than PAN-OS 8.1.15; and all versions of PAN-OS 7.1 and PAN-OS 8.0. This issue doe...