Cross-Site Scripting in Captive Portal

Palo Alto Networks firewalls can be configured to identify users through a captive portal. This process is vulnerable to a cross-site scripting attack. Ref PAN-56221/93759. The captive portal is reserved to identify internal users, thus should not be exposed to the Internet. This issue affects...

Insecure Browser API Token Generation

The Palo Alto Networks firewalls API browser does not properly use the REST API tokens. In a specific scenario, an attacker could steal the authentication token and perform calls to the firewall’s API. Ref PAN-61046/PAN-100428 This post-authentication issue requires the attacker to have access to...

Insecure Browser API Token Generation

The Palo Alto Networks firewalls API browser does not properly use the REST API tokens. In a specific scenario, an attacker could steal the authentication token and perform calls to the firewall’s API. Ref PAN-61046/100428...

Cross-Site Scripting in Captive Portal

Palo Alto Networks firewalls can be configured to identify users through a captive portal. This process is vulnerable to a cross-site scripting attack. Ref PAN-56221/93759...

Cross-Site Scripting in Web Interface

The Palo Alto Networks web management interface is vulnerable to a post-authentication persistent cross-site scripting condition in the monitor tab. Ref PAN-57659/95895. This issue affects the management interface of the device, where an authenticated administrator could inject malicious JavaScri...

OpenSSL Vulnerabilities

The OpenSSL library has been found to contain vulnerabilities CVE-2016-0703, CVE-2016-0704, and CVE-2016-0800. Palo Alto Networks software makes use of the vulnerable library. Ref PAN-55477/92481 The OpenSSL library in use by PAN-OS is patched on a regular basis. Severities of the CVEs listed und...

Insecure Server Configuration

An incorrect Web management server configuration was identified in PAN-OS. Ref PAN-52038/86767. This post-authentication issue affects the management interface of the device, where an incorrect configuration could lead to JavaScript execution. This issue affects PAN-OS 5.0.19 and earlier; PAN-OS...

OpenSSL Vulnerabilities

The OpenSSL library has been found to contain several vulnerabilities CVE-2015-4000, CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1792, CVE-2015-1791, CVE-2014-8176. Palo Alto Networks software makes use of the vulnerable library. Ref PAN-48954/81411 The OpenSSL library in use by PAN-OS ...

Insecure Server Configuration

An incorrect Web management server configuration was identified in PAN-OS. Ref PAN-52038/86767...

OpenSSL Vulnerabilities

The OpenSSL library has been found to contain several vulnerabilities CVE-2015-4000, CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1792, CVE-2015-1791, CVE-2014-8176. Palo Alto Networks software makes use of the vulnerable library. Ref PAN-48954/81411...

Cross-Site Scripting in Web Interface

The Palo Alto Networks web management interface is vulnerable to a post-authentication persistent cross-site scripting condition in the monitor tab. Ref PAN-57659/95895...

OpenSSL Vulnerabilities

The OpenSSL library has been found to contain vulnerabilities CVE-2016-0703, CVE-2016-0704, and CVE-2016-0800. Palo Alto Networks software makes use of the vulnerable library. Ref PAN-55477/92481...

Web interface denial of service

Palo Alto Networks web management server is vulnerable to a denial-of-service attack. Ref PAN-64917/105311 CVE-2014-9708 This pre-authenticated denial-of-service attack could disrupt the web management interface. This issue affects PAN-OS 5.0.19 and earlier; PAN-OS 5.1.12 and earlier; PAN-OS 6.0....

Web interface denial of service

Palo Alto Networks web management server is vulnerable to a denial-of-service attack. Ref PAN-64917/105311 CVE-2014-9708 This pre-authenticated denial-of-service attack could disrupt the web management interface. This issue affects PAN-OS 5.0.19 and earlier; PAN-OS 5.1.12 and earlier; PAN-OS 6.0....

GlobalProtect Portal Version Disclosure

A Palo Alto Networks firewall configured to host the GlobalProtect Portal advertises its running PAN-OS version. Ref PAN-60568/99786 This information disclosure does not lead to a device compromise or a disallowed access. This issue affects PAN-OS 7.0.9 and earlier; PAN-OS 7.1.4 and earlier Work...

Kernel Vulnerabilities

The kernel in use by the Management Plane of PAN-OS is vulnerable to CVE-2015-5364 and CVE-2015-5366. Ref PAN-52379/87408 The CVSS Score of CVE-2015-5364 is 7.8, High; while the CVSS Score of CVE-2015-5366 is 5.0, Medium. Those could lead to a Denial of Service attack. This issue affects PAN-OS...

GlobalProtect Portal Version Disclosure

A Palo Alto Networks firewall configured to host the GlobalProtect Portal advertises its running PAN-OS version. Ref PAN-60568/99786...

Kernel Vulnerabilities

The kernel in use by the Management Plane of PAN-OS is vulnerable to CVE-2015-5364 and CVE-2015-5366. Ref PAN-52379/87408...

Web interface denial of service

Palo Alto Networks firewalls offer a web interface to manage all aspects of the device. A denial of service condition was identified in this process Ref 89984. A third party could remotely disrupt the web management process and cause a management delay before the device resumes normal management...

Web interface denial of service

Palo Alto Networks firewalls offer a web interface to manage all aspects of the device. A denial of service condition was identified in this process Ref 89984...

OpenSSL Vulnerabilities

The OpenSSL library embedded in the GlobalProtect™ agent, TerminalServer™ agent and UserID™ agent is affected by the following public vulnerabilities: CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, CVE-2016-2109, and CVE-2016-2176 Ref 100669, 100133, PAN-60833. At the time of this advisory and in t...

OpenSSL Vulnerabilities

The OpenSSL library embedded in the GlobalProtect™ agent, TerminalServer™ agent and UserID™ agent is affected by the following public vulnerabilities: CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, CVE-2016-2109, and CVE-2016-2176 Ref 100669, 100133, PAN-60833...

Remote Text File Access on Traps Endpoint Server Management

The Traps ESM Server license mechanism allows for remote license validation. The unintended ability to download text files using this subsystem was recently identified. Ref CYV-8717. This vulnerability can be used to remotely retrieve text files stored on the Traps ESM. This issue affects Traps E...

Remote Text File Access on Traps Endpoint Server Management

The Traps ESM Server license mechanism allows for remote license validation. The unintended ability to download text files using this subsystem was recently identified. Ref CYV-8717...

Glibc DNS Resolver Vulnerability

A vulnerability in the GNU libc glibc DNS resolver allows remote code execution CVE-2015-7547. However, this issue can be exploited only from a DNS server that is under the control of an attacker. Ref 91886. This glibc issue is only exploitable by an attacker controlling the DNS server configured...

Glibc DNS Resolver Vulnerability

A vulnerability in the GNU libc glibc DNS resolver allows remote code execution CVE-2015-7547. However, this issue can be exploited only from a DNS server that is under the control of an attacker. Ref 91886. This glibc issue is only exploitable by an attacker controlling the DNS server configured...

OpenSSL Vulnerabilities

The OpenSSL library has been found to contain several vulnerabilities CVE-2014-8176, CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792, CVE-2015-1794, CVE-2015-3195, CVE-2015-4000, CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, CVE-2016-2108, CVE-2016-2109, CVE-2016-2176,...

NTP Vulnerabilities

The open source ntp project has been found to contain several vulnerabilities CVE-2015-8158, CVE-2015-8138, CVE-2015-7979, CVE-2015-7978, CVE-2015-7977, CVE-2015-7976, CVE-2015-7975, CVE-2015-7974, CVE-2015-7973, all released in January 2016. Palo Alto... Also Palo Alto Networks make use of the...

NTP Vulnerabilities

The open source ntp project has been found to contain several vulnerabilities CVE-2015-8158, CVE-2015-8138, CVE-2015-7979, CVE-2015-7978, CVE-2015-7977, CVE-2015-7976, CVE-2015-7975, CVE-2015-7974, CVE-2015-7973, all released in January 2016. Palo Alto...

OpenSSL Vulnerabilities

The OpenSSL library has been found to contain several vulnerabilities CVE-2014-8176, CVE-2015-1788, CVE-2015-1789, CVE-2015-1790, CVE-2015-1791, CVE-2015-1792, CVE-2015-1794, CVE-2015-3195, CVE-2015-4000, CVE-2016-2105, CVE-2016-2106, CVE-2016-2107, CVE-2016-2108, CVE-2016-2109, CVE-2016-2176,...

WildFire Cross-Site Scripting Vulnerability

A Palo Alto Networks firewall displaying a WildFire cloud integrated report is susceptible to a cross-site scripting condition Ref WTC-3355. A sample analyzed by the WildFire cloud could trigger a cross-site scripting attack against a firewall administrator who is displaying a WildFire report. Th...

WildFire Cross-Site Scripting Vulnerability

A Palo Alto Networks firewall displaying a WildFire cloud integrated report is susceptible to a cross-site scripting condition Ref WTC-3355...

Local Privilege Escalation in GlobalProtect App for OS X

A vulnerability was recently identified which allows a local user to escalate privileges through the GlobalProtect App for OS X Ref 97042. Local users not entitled to the admin context on OS X could use this vulnerability to run processes with higher rights. This issue affects GlobalProtect App f...

Local Privilege Escalation in GlobalProtect Agent for OS X

A vulnerability was recently identified which allows a local user to escalate privileges through the GlobalProtect Agent for OS X Ref 97042...

Web Interface Privilege Escalation

Palo Alto Networks Panorama administrators have the ability to assign predefined permissions to users created on PAN-OS. A read-only user with CLI access could elevate web interface privileges. Ref. 88191 A user could elevate privileges by impersonating another user with higher permissions. This...

Cron local privilege escalation

Palo Alto Networks firewalls use the cron infrastructure to perform household system cleanup at regular intervals. Due to an error in user input normalization, a file locally created by an end user and placed in a specific directory could be executed in a higher privilege context Ref. 93612...

Cross-site scripting issue in policy

Palo Alto Networks firewalls running the PAN-OS web interface are subject to a cross-site scripting vulnerability Ref. 93072. Exploitation of this problem is available only to interactive users logged in to the management interface with read and write privileges. This issue affects PAN-OS 5.0.18...

Captive Portal denial of service

You can configure Palo Alto Networks firewalls to host a web-based Captive Portal to authenticate users. A denial of service condition was identified in this subsystem Ref. 92413. A third party user could remotely disrupt the captive portal’s operation, provoking a delay before it resumes normal...

Cross-site scripting issue in policy

Palo Alto Networks firewalls running the PAN-OS web interface are subject to a cross-site scripting vulnerability Ref. 93072...

Cron local privilege escalation

Palo Alto Networks firewalls use the cron infrastructure to perform household system cleanup at regular intervals. Due to an error in user input normalization, a file locally created by an end user and placed in a specific directory could be executed in a higher privilege context Ref. 93612...

Web Interface Privilege Escalation

Palo Alto Networks Panorama administrators have the ability to assign predefined permissions to users created on PAN-OS. A read-only user with CLI access could elevate web interface privileges. Ref. 88191...

Captive Portal denial of service

You can configure Palo Alto Networks firewalls to host a web-based Captive Portal to authenticate users. A denial of service condition was identified in this subsystem Ref. 92413...

Local privilege escalation

Palo Alto Networks firewalls do not properly sanitize the rootreboot local invocation which can potentially allow executing code with higher privileges Ref. 92293 CVE-2016-1712. Exploitation of this privilege escalation is restricted to local users. Potential attackers would have to first obtain ...

Local privilege escalation

Palo Alto Networks firewalls do not properly sanitize the rootreboot local invocation which can potentially allow executing code with higher privileges Ref. 92293 CVE-2016-1712. Exploitation of this privilege escalation is restricted to local users. Potential attackers would have to first obtain ...

OpenSSH vulnerabilities

OpenSSH contains two vulnerabilities CVE-2016-0777 and CVE-2016-0778 affecting the SSH client roaming feature when connecting to a malicious server. Exploitation of this issue can leak portions of memory from the SSH client process. Ref 90508 The Palo Alto Networks firewall outbound SSH client...

OpenSSH vulnerabilities

OpenSSH contains two vulnerabilities CVE-2016-0777 and CVE-2016-0778 affecting the SSH client roaming feature when connecting to a malicious server. Exploitation of this issue can leak portions of memory from the SSH client process. Ref 90508...

Update Server API Exposure

The Palo Alto Networks update server enables downloading of PAN-OS software releases and dynamic updates through a public API. Some functions of the API were inadvertently exposed to the public. API functions publicly available and exclusively used by internal workflow allowed for remote call. Th...

Update Server API Exposure

The Palo Alto Networks update server enables downloading of PAN-OS software releases and dynamic updates through a public API. Some functions of the API were inadvertently exposed to the public...

Cross-site scripting vulnerability

A cross-site scripting vulnerability exists in the web interface whereby data provided by the user is stored without sanitization. Ref 90635 CVE-2016-2219. This issue affects the management interface of the device, where an authenticated administrator may be tricked into injecting malicious...

Cross-site scripting vulnerability

A cross-site scripting vulnerability exists in the web interface whereby data provided by the user is stored without sanitization. Ref 90635 CVE-2016-2219. This issue affects the management interface of the device, where an authenticated administrator may be tricked into injecting malicious...