漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
PAN-OS: Panorama authentication bypass vulnerability
Vulnerability Description
An authentication bypass vulnerability in the Panorama context switching feature allows an attacker with network access to a Panorama's management interface to gain privileged access to managed firewalls. An attacker requires some knowledge of managed firewalls to exploit this issue. This issue does not affect Panorama configured with custom certificates authentication for communication between Panorama and managed devices. This issue affects: PAN-OS 7.1 versions earlier than 7.1.26; PAN-OS 8.1 versions earlier than 8.1.12; PAN-OS 9.0 versions earlier than 9.0.6; All versions of PAN-OS 8.0.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
认证机制不恰当
Vulnerability Title
Palo Alto Networks PAN-OS 授权问题漏洞
Vulnerability Description
Palo Alto Networks PAN-OS是美国Palo Alto Networks公司的一套为其防火墙设备开发的操作系统。 Palo Alto Networks PAN-OS的Panorama上下文切换功能中存在授权问题漏洞。攻击者可通过网络访问Panorama管理界面利用该漏洞以较高的权限访问所管理的防火墙。以下产品及版本受到影响:Palo Alto Networks PAN-OS 7.1.26之前的7.1版本,8.1.12之前的8.1版本,9.0.0.6之前的9.0版本,8.0所有版本。
CVSS Information
N/A
Vulnerability Type
N/A