Palo Alto Networks PAN-OS XML API Key Security Restriction Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
Palo Alto Network PAN-OS
Description:
--------------------------------------------------------------------------------
Bugtraq id: 65886

PAN-OS is used to control the operating system of the new generation firewall of Palo Alto Networks. It provides a wide range of firewall, management, and network functions.

In earlier versions of PAN-OS 4.1.16, 5.0.10, and 5.1.5, the Security Restriction Bypass Vulnerability exists. Attackers can exploit this vulnerability to bypass the security restriction and perform unauthorized operations.

<* Source: Anton Ziukin
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Palo Alto Network
-----------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Https://securityadvisories.paloaltonetworks.com