Test ID:	1.3.6.1.4.1.25623.1.0.105324
Category:	Palo Alto PAN-OS Local Security Checks
Title:	Palo Alto PAN-OS PAN-SA-2015-0004
Summary:	An XML parsing vulnerability exists in PAN-OS allowing a malicious user within PAN-OS to inject malicious;XML data into the web-based device management front-end allowing the user to retrieve arbitrary content from the device. The user must be an;authenticated user issuing the request. (Ref #71273)
Description:	Summary: An XML parsing vulnerability exists in PAN-OS allowing a malicious user within PAN-OS to inject malicious XML data into the web-based device management front-end allowing the user to retrieve arbitrary content from the device. The user must be an authenticated user issuing the request. (Ref #71273) Vulnerability Impact: This issue affects the management interface of the device, where an authenticated administrator injects malicious XML data into the web UI interface. Affected Software/OS: PAN-OS 6.1.3 and earlier, PAN-OS 6.0.7 and earlier, PAN-OS 5.0.15 and earlier Solution: Update to PAN-OS 6.1.4, PAN-OS 6.0.8, or PAN-OS 5.0.16 CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:N/A:N
Copyright	This script is Copyright (C) 2015 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.