Description
An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software enables a malicious user with stolen credentials to establish a VPN connection from an unauthorized IP address.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | PAN-OS | 10.2 – < 10.2.4, 11.0 – < 11.0.1 | 9.0 |
| Palo Alto Networks | Prisma Access | — | All |
| Palo Alto Networks | Cloud NGFW | — | All |
Advisories 1
- WID-SEC-2024-0394 PaloAlto Networks PAN-OS: Mehrere Schwachstellen BSI CERT-Bund (WID) · Feb 14, 2024