Panorama vulnerability allows unauthorized access and system disruption
CVE-2024-5911

Currently unrated

Key Information:

Vendor
Palo Alto Networks
Status
Pan-os
Cloud Ngfw
Prisma Access
Vendor
CVE Published:
10 July 2024

Badges

đź“° News Worthy

Summary

An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventually cause the Panorama to enter maintenance mode, which requires manual intervention to bring the Panorama back online.

Affected Version(s)

PAN-OS Panorama 10.2.0 < 10.2.4

PAN-OS Panorama 10.1.0 < 10.1.9

Cloud NGFW All

News Articles

favicon imageSecurity Affairs

Palo Alto Networks fixed a critical bug in the Expedition tool

Palo Alto Networks addressed five vulnerabilities impacting its products, including a critical authentication bypass issue.

7 months ago

favicon imageSecurity Affairs

Palo Alto Networks fixed a critical bug in the Expedition tool

Palo Alto Networks addressed five vulnerabilities impacting its products, including a critical authentication bypass issue.

7 months ago

References

https://security.paloaltonetworks.com/CVE-2024-5911
vendor-advisory

Timeline

  • đź“°

    First article discovered by Security Affairs

  • Vulnerability published

  • Vulnerability Reserved

Credit

Yasukazu Miyashita of Palo Alto Networks
.