CVE-2024-0012

Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

Pan-Os

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like CVE-2024-9474 https://security.paloaltonetworks.com/CVE-2024-9474 . The risk of this issue is greatly reduced if you secure access to the management…

18. Nov 2024

Ausgewertete Quellen

• Hersteller
  https://security.paloaltonetworks.com/CVE-2024-0012
• Hersteller
  https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474/
• Hinweis
  https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-0012
• CISA
  Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability
• NVD
  CVE-2024-0012