Description
The PAN-OS response for GlobalProtect Gateway in Palo Alto Networks PAN-OS 6.1.21 and earlier, PAN-OS 7.1.18 and earlier, PAN-OS 8.0.11 and earlier may allow an unauthenticated attacker to inject arbitrary JavaScript or HTML. PAN-OS 8.1 is NOT affected.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | PAN-OS | 6.1.21 and earlier, 7.1.18 and earlier, 8.0.11 and earlier | — |
References
- 105111 vdb-entry
- 1041544 vdb-entry
- https://security.paloaltonetworks.com/CVE-2018-10139