DeutschShown in its original language — a full translation is planned for a future version.
PaloAlto Networks PAN-OS und GlobaProtect: Mehrere Schwachstellen
view advisory published 2024-09-11
Ein Angreifer kann mehrere Schwachstellen in PaloAlto Networks PAN-OS und PaloAlto Networks GlobalProtect ausnutzen, um beliebigen Code auszuführen, vertrauliche Informationen offenzulegen oder sich als ein anderer Benutzer auszugeben.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-8691US | high7.1OT elevated | — | ||
A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated GlobalProtect user to impersonate another GlobalProtect user. Ac… | ||||
| CVE-2024-8688US | medium4.4 | — | ||
An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables authenticated administrators (including read-only… | ||||
| CVE-2024-8687US | high7.1 | — | ||
An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall passwo… | ||||
| CVE-2024-8686US | high7.2 | — | ||
A command injection vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to bypass system restrictions and run arbitrary commands as root on t… | ||||
02
references
External citations — patches, advisories, analysis.
- Palo Alto Networks Security Advisories vom 2024-09-11external
- Palo Alto Networks Security Advisories vom 2024-09-11external
- Palo Alto Networks Security Advisories vom 2024-09-11external
- Palo Alto Networks Security Advisories vom 2024-09-11external
- WID-SEC-W-2024-2127 - CSAF Versionself
- WID-SEC-2024-2127 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan