PT-2019-1730 · Palo Alto Networks · Pan-Os

Publicado 2019-03-26 · Atualizado 2020-08-24 · CVE-2019-1572

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PAN-OS version 9.0.0

Description The issue is related to an authentication bypass vulnerability in the management web interface of PAN-OS. This vulnerability may allow an unauthenticated remote user to access php files, potentially leading to unauthorized access to protected information.

Recommendations For PAN-OS version 9.0.0, update to a version that includes the fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to the management web interface to minimize the risk of unauthorized access.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

BDU:2019-01364

CVE-2019-1572

Produtos afetados

Pan-Os

Referências · 6

• https://securityadvisories.paloaltonetworks.com/Home/Detail/145 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-1572 · Nota de Segurança
• https://security.paloaltonetworks.com/CVE-2019-1572 · Nota
• http://securityfocus.com/bid/107720 · Nota
• https://osv.dev/vulnerability/CVE-2019-1572 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-01364 · Nota de Segurança