imPC@ndo IT

Tracker / CVE-2019-17437

CVE-2019-17437

High 7.8

An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser custom role user to elevate privileges and become superuser. This issue affects PAN-OS 7.1 versions prior to 7.1.25; 8.0 versions prior to 8.0.20; 8.1 versions prior to 8.1.11; 9.0 versions prior to 9.0.5. PAN-OS version 7.0 and prior EOL versions have not been evaluated for this issue.

Affected products and versions

paloaltonetworks pan-os · 7.1.0 → 7.1.25
paloaltonetworks pan-os · 8.0.0 → 8.0.20
paloaltonetworks pan-os · 8.1.0 → 8.1.11
paloaltonetworks pan-os · 9.0.0 → 9.0.5

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References