Description (CNA)
An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventually cause the Panorama to enter maintenance mode, which requires manual intervention to bring the Panorama back online.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Palo Alto Networks / PAN-OS | unaffected 11.2; unaffected 11.1; unaffected 11.0; affected 10.2.0 before 10.2.4; affected 10.1.0 before 10.1.9 |
| Palo Alto Networks / Cloud NGFW | unaffected All |
| Palo Alto Networks / Prisma Access | unaffected All |
CWE
CWE-434
References
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.