Description (CNA)
An improper verification vulnerability in the GlobalProtect gateway feature of Palo Alto Networks PAN-OS software enables a malicious user with stolen credentials to establish a VPN connection from an unauthorized IP address.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Palo Alto Networks / PAN-OS | unaffected 9.0; unaffected 9.1; unaffected 10.1; affected 10.2 before 10.2.4; affected 11.0 before 11.0.1; unaffected 11.1 |
| Palo Alto Networks / Prisma Access | unaffected All |
| Palo Alto Networks / Cloud NGFW | unaffected All |
CWE
CWE-940
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.