Description (CNA)
An information disclosure vulnerability in the SD-WAN feature of Palo Alto Networks PAN-OS® software enables an unauthorized user to view unencrypted data sent from the firewall through the SD-WAN interface. This requires the user to be able to intercept packets sent from the firewall. Cloud NGFW and Prisma® Access are not affected by this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Palo Alto Networks / Cloud NGFW | unaffected All |
| Palo Alto Networks / PAN-OS | affected 11.2.0 before 11.2.7; affected 11.1.0 before 11.1.10; affected 10.2.0 before 10.2.17; affected 10.1.0 before 10.1.14-h16 |
| Palo Alto Networks / Prisma Access | unaffected All |
CWE
CWE-497
References
ADP enrichment
No English description supplied.
No references supplied.