Test Kennung:	1.3.6.1.4.1.25623.1.0.105563
Kategorie:	Palo Alto PAN-OS Local Security Checks
Titel:	Palo Alto PAN-OS PAN-SA-2016-0003
Zusammenfassung:	Palo Alto Networks PAN-OS implements an API to enable programmatic device configuration and administration of the device. An issue was identified where the management API incorrectly parses input to a specific API call, leading to execution of arbitrary OS commands without authentication via the management interface.
Beschreibung:	Summary: Palo Alto Networks PAN-OS implements an API to enable programmatic device configuration and administration of the device. An issue was identified where the management API incorrectly parses input to a specific API call, leading to execution of arbitrary OS commands without authentication via the management interface. Vulnerability Impact: This issue can be exploited remotely by an unauthenticated user with network access to the device management web-based API Affected Software/OS: PAN-OS releases 5.0.17, 6.0.12, 6.1.9, 7.0.4 and prior Solution: Update to PAN-OS releases 5.0.18, 6.0.13, 6.1.10 and 7.0.5 and newer CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2016-3655
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.