PT-2016-5071 · Palo Alto Networks · Pan-Os

Juan Sacco + 1 · Publicado 2016-06-27 · Atualizado 2020-02-17 · CVE-2016-2219

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Média

Vetor base

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 7.0.1 through 7.0.7

Description A cross-site scripting issue exists in the management interface of the device, allowing remote authenticated users to inject arbitrary web script or HTML. This occurs because data provided by the user is stored without proper sanitization, which can be exploited by tricking an authenticated administrator into injecting malicious JavaScript into the web interface.

Recommendations For versions 7.0.1 through 7.0.7, update to version 7.0.8 or later to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2016-2219

Produtos afetados

Pan-Os

Referências · 4

• http://securitytracker.com/id/1036192 · Nota
• https://osv.dev/vulnerability/CVE-2016-2219 · Aviso do Fabricante
• https://security.paloaltonetworks.com/CVE-2016-2219 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2016-2219 · Nota de Segurança