CVE-2016-1712: Improper Input Validation

Palo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6.1.12, and 7.0.x before 7.0.8 might allow local users to gain privileges by leveraging improper sanitization of the rootreboot local invocation...

PT-2016-6646

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.7 PAN-OS versions 6.1, 7.0.15 and earlier, 7.1.9 and earlier Description The issue is related to the improper determination of the rate of challenge ACK segments in the Linux kernel and PAN-OS, which makes it...

Palo Alto Networks PAN-OS Denial of Service Vulnerability (CNVD-2016-05079)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks, Inc. for its firewall appliances. A denial of service vulnerability exists in Palo Alto Networks PAN-OS versions 7.0.1 through 7.0.7. An attacker could exploit this vulnerability to cause a denial of service...

Web Interface Privilege Escalation

Palo Alto Networks Panorama administrators have the ability to assign predefined permissions to users created on PAN-OS. A read-only user with CLI access could elevate web interface privileges. Ref. 88191 A user could elevate privileges by impersonating another user with higher permissions. This...

Cron local privilege escalation

Palo Alto Networks firewalls use the cron infrastructure to perform household system cleanup at regular intervals. Due to an error in user input normalization, a file locally created by an end user and placed in a specific directory could be executed in a higher privilege context Ref. 93612...

Cross-site scripting issue in policy

Palo Alto Networks firewalls running the PAN-OS web interface are subject to a cross-site scripting vulnerability Ref. 93072. Exploitation of this problem is available only to interactive users logged in to the management interface with read and write privileges. This issue affects PAN-OS 5.0.18...

Captive Portal denial of service

You can configure Palo Alto Networks firewalls to host a web-based Captive Portal to authenticate users. A denial of service condition was identified in this subsystem Ref. 92413. A third party user could remotely disrupt the captive portal’s operation, provoking a delay before it resumes normal...

Palo Alto PAN-OS Local privilege escalation (PAN-SA-2016-0012)

Palo Alto Networks firewalls do not properly sanitize the rootreboot local invocation which can potentially allow executing code with higher privileges SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Palo Alto PAN-OS OpenSSH vulnerabilities (PAN-SA-2016-0011)

OpenSSH contains two vulnerabilities CVE-2016-0777 and CVE-2016-0778 affecting the SSH client roaming feature when connecting to a malicious server. Exploitation of this issue can leak portions of memory from the SSH client process. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions...

Local privilege escalation

Palo Alto Networks firewalls do not properly sanitize the rootreboot local invocation which can potentially allow executing code with higher privileges Ref. 92293 CVE-2016-1712. Exploitation of this privilege escalation is restricted to local users. Potential attackers would have to first obtain ...

Local privilege escalation

Palo Alto Networks firewalls do not properly sanitize the rootreboot local invocation which can potentially allow executing code with higher privileges Ref. 92293 CVE-2016-1712. Exploitation of this privilege escalation is restricted to local users. Potential attackers would have to first obtain ...

PT-2016-4899

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 5.0.18 and earlier Palo Alto Networks PAN-OS versions 5.1.11 and earlier Palo Alto Networks PAN-OS versions 6.0.13 and earlier Palo Alto Networks PAN-OS versions 6.1.11 and earlier Palo Alto Networks PAN-OS...

CVE-2016-2219

Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2219

Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2219

Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2016-2219

The CVE-2016-2219 issue affects Palo Alto Networks PAN-OS 7.x prior to 7.0.8. It is a cross-site scripting (XSS) vulnerability in the management interface where authenticated users can inject arbitrary script or HTML via unspecified vectors. Multiple sources corroborate that the vulnerability exi...

OpenSSH vulnerabilities

OpenSSH contains two vulnerabilities CVE-2016-0777 and CVE-2016-0778 affecting the SSH client roaming feature when connecting to a malicious server. Exploitation of this issue can leak portions of memory from the SSH client process. Ref 90508 The Palo Alto Networks firewall outbound SSH client...

CVE-2016-2219: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the management interface in Palo Alto Networks PAN-OS 7.x before 7.0.8 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

Palo Alto Networks PAN-OS 6.1.x < 6.1.11 Multiple Vulnerabilities

The version of Palo Alto Networks PAN-OS running on the remote host is 6.1.x 6.1.11. It is, therefore, affected by multiple vulnerabilities : - An unspecified flaw exists that allows an authenticated, remote attacker to access potentially sensitive information in the system logs. - A security...