- Vendor / Project
- Palo Alto Networks
- Product
- PAN-OS
- Date added
- Feb 20, 2025
- Due date
- Mar 13, 2025
- Known ransomware use
- Unknown
- CWEs
- CWE-73
Description
Palo Alto Networks PAN-OS contains an external control of file name or path vulnerability. Successful exploitation enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.