Design/Logic Flaw

2021-08-1117:15:00

PRIOn knowledge base

www.prio-n.com

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

An OS command argument injection vulnerability in the Palo Alto Networks PAN-OS web interface enables an authenticated administrator to read any arbitrary file from the file system. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.19; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14; PAN-OS 9.1 versions earlier than PAN-OS 9.1.10. PAN-OS 10.0 and later versions are not impacted.

CPENameOperatorVersion
pan-osge8.1.0
pan-oslt8.1.19
pan-osge9.1.0
pan-oslt9.1.10
pan-osge9.0.0
pan-oslt9.0.14

Name	Operator	Version
pan-os	ge	8.1.0
pan-os	lt	8.1.19
pan-os	ge	9.1.0
pan-os	lt	9.1.10
pan-os	ge	9.0.0
pan-os	lt	9.0.14

References

security.paloaltonetworks.com/CVE-2021-3045