Critical · published February 13, 2025
CVSS calls it critical at 9.1. It is confirmed in active exploitation. It sits in the 99.9th percentile for exploit probability.
⚡ An authentication bypass lurking in PAN-OS can let attackers through the front door without a key! Think of it like a hotel with a management office that anyone can stroll into, bypassing the security checkpoint. Without proper access control, sensitive information is just hanging out in plain sight! This vulnerability could allow an unauthenticated attacker with network access to the management interface to invoke certain PHP scripts. While it doesn’t lead to full remote code execution, it puts your system's integrity and confidentiality at risk, making it a high-stakes game for those trying to protect sensitive data.
Think of it like a hotel with a management office that anyone can stroll into, bypassing the security checkpoint. Without proper access control, sensitive information is just hanging out in plain sight! The flaw in the Palo Alto Networks PAN-OS software permits attackers to bypass the usual authentication checks on the management web interface, enabling unauthorized access to specific PHP scripts.
This vulnerability could allow an unauthenticated attacker with network access to the management interface to invoke certain PHP scripts. While it doesn’t lead to full remote code execution, it puts your system's integrity and confidentiality at risk, making it a high-stakes game for those trying to protect sensitive data. To mitigate this risk, restrict access to the management web interface to trusted internal IP addresses only. Follow the best practices outlined in Palo Alto’s deployment guidelines to secure your setup effectively. It's time to tighten those security measures! You've got this! By taking these steps, you can safeguard your system and keep those intruders out! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| paloaltonetworks/pan-os | ≥ 10.1.0, < 10.1.14 | 10.1.14 |
| paloaltonetworks/pan-os | ≥ 10.2.0, < 10.2.7 | 10.2.7 |
| paloaltonetworks/pan-os | ≥ 11.1.0, < 11.1.2 | 11.1.2 |
| paloaltonetworks/pan-os | ≥ 11.2.0, < 11.2.4 | 11.2.4 |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |
| paloaltonetworks/pan-os | all versions | — |