Description (CNA)
An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables an authenticated user to establish a GlobalProtect session using the identity of another user. Cloud NGFW and Panorama are not affected by this vulnerability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Palo Alto Networks / Cloud NGFW | unaffected All |
| Palo Alto Networks / PAN-OS | affected 12.2.0 before 12.2.4; affected 12.1.0 before 12.1.10-h2; affected 11.2.0 before 11.2.16; affected 11.1.0 before 11.1.16-h3; affected 10.2.0 before 10.2.18-h12 |
| Palo Alto Networks / Prisma Access | affected 12.1.0 before 12.1.7-h8; affected 11.2.0 before 11.2.7-h21; affected 10.2.0 before 10.2.10-h41 |
CWE
CWE-754
References
ADP enrichment
No English description supplied.
No references supplied.