Description (CNA)
An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenticated read-only administrator to upload files using the web interface and completely fill one of the disk partitions with those uploaded files, which prevents the ability to log into the web interface or to download PAN-OS, WildFire, and content images. This issue affects only the web interface of the management plane; the dataplane is unaffected.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Palo Alto Networks / PAN-OS | affected 9.0 before 9.0.17-h4; affected 9.1 before 9.1.17; affected 10.1 before 10.1.12; affected 10.2 before 10.2.8; affected 11.0 before 11.0.3; unaffected 11.1 |
| Palo Alto Networks / Cloud NGFW | unaffected All |
| Palo Alto Networks / Prisma Access | unaffected All |
CWE
CWE-269
References
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.