Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Palo Alto Networks PAN-OS 7.1.26, 8.1.13 and 2 more versions Clear all filters
TI-2020-01929 CVE-2020-2013 · GHSA-3cj6-6mmq-x25x

PAN-OS: Panorama context switch session cookie disclosure

Priority LOW 39

A cleartext transmission of sensitive information vulnerability in Palo Alto Networks PAN-OS Panorama that discloses an authenticated PAN-OS administrator's PAN-OS session cookie.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00655 Published 2020-05-13 Fixed in 9.0.6, 7.1.26 +2 CWE-319
TI-2020-01914 CVE-2020-1998 · GHSA-mhxp-v7wq-3qqc

PAN-OS: Improper SAML SSO authorization of shared local users

Priority MEDIUM 40

An improper authorization vulnerability in PAN-OS that mistakenly uses the permissions of local linux users instead of the intended SAML permissions of the account when the username is shared for the purposes of SSO auth…

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00892 Published 2020-05-13 Fixed in 8.1.13, 7.1.26 +2 CWE-285