PAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information Disclosure

A weak (low bit strength) device certificate in Palo Alto Networks Panorama software enables an attacker to perform a meddler-in-the-middle (MitM) attack to capture encrypted traffic between the Panorama management server and the firewalls it manages. With sufficient computing resources, the attacker could break encrypted communication and expose sensitive information that is shared between the management server and the firewalls.

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:N/A:N

不充分的加密强度

Palo Alto Networks Panorama 安全漏洞

Palo Alto Networks Networks Panorama是美国Palo Alto Networks公司的一套支持集中管理、配置防火墙的解决方案。该产品支持网络流量监控和威胁管理等功能。 Palo Alto Networks Panorama 存在安全漏洞，该漏洞源于使用弱（低位强度）设备证书。攻击者利用该漏洞能够执行中间人 (MitM) 攻击。

N/A

N/A