Skip to content
OpenAdvisories
Unscored CVE-2017-17841 EUVD-2017-8988GHSA-f3c4-7m99-h392

Palo Alto Networks PAN-OS 6.1, 7.1, and 8.0.x before 8.0.7, when an interface implements SSL decryption with RSA enabled or hosts a GlobalP…

Published Jan 10, 2018 · Updated Aug 5, 2024 · Assigned by mitre

Description

Palo Alto Networks PAN-OS 6.1, 7.1, and 8.0.x before 8.0.7, when an interface implements SSL decryption with RSA enabled or hosts a GlobalProtect portal or gateway, might allow remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a ROBOT attack.

References