Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-84g7-7gj8-34xv

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to execute arbitrary OS commands with root privileges by sending a malicious request to generate new certificates for use in the PAN-OS configuration. This issue affects: All versions of PAN-OS 8.0; PAN-OS 7.1 versions earlier than PAN-OS 7.1.26; PAN-OS 8.1 versions earlier than PAN-OS 8.1.13.

An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to execute arbitrary OS commands with root privileges by sending a malicious request to generate new certificates for use in the PAN-OS configuration. This issue affects: All versions of PAN-OS 8.0; PAN-OS 7.1 versions earlier than PAN-OS 7.1.26; PAN-OS 8.1 versions earlier than PAN-OS 8.1.13.

EPSS

Процентиль: 78%
0.01112
Низкий

Связанные уязвимости

CVSS3: 7.2
nvd
больше 5 лет назад

An OS Command Injection vulnerability in the PAN-OS web management interface allows authenticated administrators to execute arbitrary OS commands with root privileges by sending a malicious request to generate new certificates for use in the PAN-OS configuration. This issue affects: All versions of PAN-OS 8.0; PAN-OS 7.1 versions earlier than PAN-OS 7.1.26; PAN-OS 8.1 versions earlier than PAN-OS 8.1.13.

CVSS3: 7.2
fstec
больше 5 лет назад

Уязвимость веб-интерфейса управления операционной системы PAN-OS, позволяющая нарушителю выполнить произвольные команды операционной системы с привилегиями root

EPSS

Процентиль: 78%
0.01112
Низкий