跳转到帖子

PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface

recommended_posts

发布于
  • Members

PAN-OS: Authenticated File Read Vulnerability in the Management Web Interface

Severity
4
CVSS
(AV:L/AC:M/Au:N/C:P/I:P/A:P)
Published
02/12/2025
Created
02/14/2025
Added
02/13/2025
Modified
02/13/2025

Description

An authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user. You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practices deployment guidelines (https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431). This issue does not affect Cloud NGFW or Prisma Access software.

Solution(s)

  • palo-alto-networks-pan-os-upgrade-latest

References

  • https://attackerkb.com/topics/cve-2025-0111
  • CVE - 2025-0111
  • https://security.paloaltonetworks.com/CVE-2025-0111
  • 查看数 709
  • 已创建
  • 最后回复

参与讨论

你可立刻发布并稍后注册。 如果你有帐户,立刻登录发布帖子。

游客
回帖…