Test ID:	1.3.6.1.4.1.25623.1.0.105453
Category:	Palo Alto PAN-OS Local Security Checks
Title:	Palo Alto PAN-OS PAN-SA-2015-0006
Summary:	An issue has been identified in PAN-OS that prevents old management API keys for local administrator accounts from being invalidated upon password change until the device is rebooted.
Description:	Summary: An issue has been identified in PAN-OS that prevents old management API keys for local administrator accounts from being invalidated upon password change until the device is rebooted. Vulnerability Impact: This issue can create a period of time during which an administrator changes the account password, thus creating a new API key, but the old API key is still valid until device reboot. Affected Software/OS: PAN-OS versions prior to PAN-OS 7.0.2 and PAN-OS 6.1.7 Solution: Update to PAN-OS 7.0.2/6.1.7 CVSS Score: 6.5 CVSS Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P
Copyright	This script is Copyright (C) 2015 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.