Description (CNA)
An arbitrary file upload vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and potentially execute arbitrary code with limited privileges on the firewall.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Palo Alto Networks / PAN-OS | affected 8.1 before 8.1.26; affected 9.0 before 9.0.17-h1; affected 9.1 before 9.1.14; unaffected 10.1 before All; unaffected 10.2 before All; unaffected 11.0 before All; unaffected 11.1 before All |
| Palo Alto Networks / Prisma Access | unaffected All |
| Palo Alto Networks / Cloud NGFW | unaffected All |
CWE
CWE-434
References
ADP enrichment
No English description supplied.