Skip to content
OpenAdvisories
High · 8.1 CVE-2022-0030 EUVD-2022-15251GHSA-6jrf-v33r-v8h2

PAN-OS: Authentication Bypass in Web Interface

Published Oct 12, 2022 · Updated May 15, 2025 · Assigned by palo_alto

Description

An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions.

Affected products

VendorProductAffectedFixed
Palo Alto Networks PAN-OS 8.1 – < 8.1.24 9.0 All
Palo Alto Networks Cloud NGFW — All
Palo Alto Networks Prisma Access — All

References