Skip to content
OpenAdvisories
Medium WID-SEC-2024-2127 4 CVEs

PaloAlto Networks PAN-OS und GlobaProtect: Mehrere Schwachstellen

Published Sep 11, 2024 · Updated Sep 11, 2024 · de-DE

Vendor: Palo Alto Networks Product: GlobalProtect Product: PAN-OS

Summary

Ein Angreifer kann mehrere Schwachstellen in PaloAlto Networks PAN-OS und PaloAlto Networks GlobalProtect ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder sich als ein anderer Benutzer auszugeben.

Product

PAN-OS ist das Betriebssystem der Sicherheitssysteme / Firewalls der Firma Palo Alto Networks.
GlobalProtect von PaloAlto ist eine Sicherheitsplattform.

Vulnerabilities 4

  • High 8.6
    CVE-2024-8686

    PAN-OS: Command Injection Vulnerability

    A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as root on the firewall.

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 6.9
    CVE-2024-8687

    PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes

    An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or pas…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 6.7
    CVE-2024-8688

    PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)

    An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables authenticated administrators (including read-only administrators) with access to the CLI to to read arbitrary files on the firew…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices
  • Medium 5.3
    CVE-2024-8691

    PAN-OS: User Impersonation in GlobalProtect Portal

    A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated GlobalProtect user to impersonate another GlobalProtect user. Active GlobalProtect users impersonated by an attacker who is exploiting this vul…

    Palo Alto Networks PAN-OS Prisma Access Cloud NGFW Network devices

Revision history

  1. #1

    Initiale Fassung

References