PT-2019-1730 · Palo Alto Networks · Pan-Os

Published 2019-03-26 · Updated 2020-08-24 · CVE-2019-1572

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions PAN-OS version 9.0.0

Description The issue is related to an authentication bypass vulnerability in the management web interface of PAN-OS. This vulnerability may allow an unauthenticated remote user to access php files, potentially leading to unauthorized access to protected information.

Recommendations For PAN-OS version 9.0.0, update to a version that includes the fix for this issue to prevent exploitation. As a temporary workaround, consider restricting access to the management web interface to minimize the risk of unauthorized access.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2019-01364

CVE-2019-1572

Affected Products

Pan-Os

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2019-1572 · Security Note
• https://osv.dev/vulnerability/CVE-2019-1572 · Vendor Advisory
• https://bdu.fstec.ru/vul/2019-01364 · Security Note
• https://securityadvisories.paloaltonetworks.com/Home/Detail/145 · Note
• https://security.paloaltonetworks.com/CVE-2019-1572 · Note
• http://securityfocus.com/bid/107720 · Note