漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
PAN-OS: Panorama session disclosure during context switch into managed device
Vulnerability Description
An information exposure vulnerability exists in Palo Alto Networks Panorama software that discloses the token for the Panorama web interface administrator's session to a managed device when the Panorama administrator performs a context switch into that device. This vulnerability allows an attacker to gain privileged access to the Panorama web interface. An attacker requires some knowledge of managed firewalls to exploit this issue. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.17; PAN-OS 9.0 versions earlier than PAN-OS 9.0.11; PAN-OS 9.1 versions earlier than PAN-OS 9.1.5.
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Type
信息暴露
Vulnerability Title
Palo Alto Networks Panorama 信息泄露漏洞
Vulnerability Description
Palo Alto Networks Panorama是美国Palo Alto Networks公司的一套支持集中管理、配置防火墙的解决方案。该产品支持网络流量监控和威胁管理等功能。 Palo Alto Networks Panorama 存在信息泄露漏洞，该漏洞源于存在一个信息暴露漏洞，当管理员执行到该设备的上下文切换时，该信息暴露了web界面管理员与被管理设备的会话令牌。攻击者可利用该漏洞获得访问全景网络界面的特权。以下产品及版本受到影响：PAN-OS 8.1版本至PAN-OS 8.1.17版本，PA
CVSS Information
N/A
Vulnerability Type
N/A