Free and open-source vulnerability scanner
Mageni eases for you the vulnerability scanning, assessment, and management process. It is free and open-source.
Install NowAvailable for macOS, Windows, and Linux
Palo Alto PAN-OS PAN-SA-2015-0004
Information
Severity
Severity
Medium
Family
Family
Palo Alto PAN-OS Local Security Checks
CVSSv2 Base
CVSSv2 Base
4.0
CVSSv2 Vector
CVSSv2 Vector
AV:N/AC:L/Au:S/C:P/I:N/A:N
Solution Type
Solution Type
Vendor Patch
Created
Created
8 years ago
Modified
Modified
5 years ago
Summary
An XML parsing vulnerability exists in PAN-OS allowing a malicious user within PAN-OS to inject malicious XML data into the web-based device management front-end allowing the user to retrieve arbitrary content from the device. The user must be an authenticated user issuing the request. (Ref #71273)
Affected Software
Affected Software
PAN-OS 6.1.3 and earlier, PAN-OS 6.0.7 and earlier, PAN-OS 5.0.15 and earlier
Detection Method
Detection Method
Checks if a vulnerable version is present on the target host.
Solution
Solution
Update to PAN-OS 6.1.4, PAN-OS 6.0.8, or PAN-OS 5.0.16