Test ID:	1.3.6.1.4.1.25623.1.0.140071
Category:	Palo Alto PAN-OS Local Security Checks
Title:	Palo Alto PAN-OS XPath Injection (PAN-SA-2016-0037)
Summary:	The Addresses Object parsing function does not properly escape single quotes. This post-authentication vulnerability could allow XPath manipulation.
Description:	Summary: The Addresses Object parsing function does not properly escape single quotes. This post-authentication vulnerability could allow XPath manipulation. Affected Software/OS: PAN-OS 5.0.19 and earlier, PAN-OS 5.1.12 and earlier, PAN-OS 6.0.14 and earlier, PAN-OS 6.1.14 and earlier, PAN-OS 7.0.10 and earlier, PAN-OS 7.1.5 and earlier Solution: Update to PAN-OS 5.0.20 and later, PAN-OS 5.1.13 and later, PAN-OS 6.0.15 and later, PAN-OS 6.1.15 and later, PAN-OS 7.0.11 and later, PAN-OS 7.1.6 and later CVSS Score: 4.0 CVSS Vector: AV:N/AC:L/Au:S/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-9149 BugTraq ID: 94401 http://www.securityfocus.com/bid/94401 http://www.securitytracker.com/id/1037379
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.