Palo Alto Networks Releases Security Update for PAN-OS Vulnerability

Palo Alto Networks has released a security update addressing an authentication bypass vulnerability in PAN-OS

Threat ID:: CC-4191
Threat Severity:: Information only
Published:: 14 October 2022 2:08 PM

Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Palo Alto Networks has released a security update addressing an authentication bypass vulnerability in PAN-OS

Affected platforms

The following platforms are known to be affected:

Versions: PAN-OS 8.1 prior to 8.1.24

Palo Alto Networks PAN-OS

Threat details

Introduction

Palo Alto Networks released security updates to address a vulnerability affecting the PAN-OS 8.1 web interface. An authentication bypass vulnerability in the PAN-OS 8.1 web interface could allow a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions.

Remediation advice

Affected organisations are encouraged to review the Palo Alto advisory CVE-2022-0030 PAN-OS: Authentication Bypass in Web Interface and apply any relevant updates.

Definitive source of threat updates

https://security.paloaltonetworks.com/CVE-2022-0030

CVE Vulnerabilities

Status Published

CVE-2022-0030

An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions.

Last edited: 14 October 2022 2:08 pm