PT-2017-17584 · Palo Alto Networks · Pan-Os

Christophe Schleypen · Publicado 2017-04-10 · Atualizado 2019-10-03 · CVE-2017-7218

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions prior to 7.1.9

Description A privilege escalation issue exists in the Management Web Interface due to improper validation of specific request parameters, potentially allowing execution of code with higher privileges. This issue requires an attacker to be authenticated.

Recommendations For versions prior to 7.1.9, update to version 7.1.9 or later to resolve the issue. As a temporary workaround, consider restricting access to the Management Web Interface to minimize the risk of exploitation.

Correção

LPE

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2017-7218

Produtos afetados

Pan-Os

Referências · 5

• https://osv.dev/vulnerability/CVE-2017-7218 · Aviso do Fabricante
• https://security.paloaltonetworks.com/CVE-2017-7218 · Nota
• http://securitytracker.com/id/1038248 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-7218 · Nota de Segurança
• http://securityfocus.com/bid/97592 · Nota