CVE-2022-0030 — PAN-OS: Authentication Bypass in Web Interface

Description (CNA)

An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions.

Affected (CNA)

Vendor / product	Versions
Palo Alto Networks / PAN-OS	unaffected 9.0 All; unaffected 9.1 All; unaffected 10.1 All; unaffected 10.2 All; unaffected 10.0 All; affected 8.1 before 8.1.24
Palo Alto Networks / Cloud NGFW	unaffected All
Palo Alto Networks / Prisma Access	unaffected All

CWE

CWE-290

References

https://security.paloaltonetworks.com/CVE-2022-0030

ADP enrichment

CVE

No English description supplied.

https://security.paloaltonetworks.com/CVE-2022-0030

CISA-ADP

No English description supplied.

No references supplied.