Aller au contenu
en Se connecter
6.8 Moyenne

CVE-2025-0115 A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read…

Description

A vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated admin on the PAN-OS CLI to read arbitrary files. The attacker must have network access to the management interface (web, SSH, console, or telnet) and successfully authenticate to exploit this issue. You can greatly reduce the risk of this issue by restricting access to the management interface to only trusted users and internal IP addresses according to our recommended critical deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access.

Produits et versions touchés

Produit Versions touchées Corrigé en
PAN-OS 11.2 11.2.0 → < 11.2.3 11.2.3
PAN-OS 11.1 11.1.0 → < 11.1.5 11.1.5
PAN-OS 11.0 11.0.0 → < 11.0.6 11.0.6
PAN-OS 10.2 10.2.0 → < 10.2.11 10.2.11
PAN-OS 10.1 10.1.0 → < 10.1.14-h11 10.1.14-h11
Cloud NGFW Versions non publiées
Prisma Access Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de PAN-OS

Les 197 CVE de PAN-OS →
CVE-2026-0316 A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious… 1.1 Faible CVE-2026-0317 A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only… 1.2 Faible CVE-2026-0318 A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software… 4.6 Moyenne CVE-2026-0319 An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables… 4.9 Moyenne
Suivre cette CVE