Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2022-0030

PAN-OS: Authentication Bypass in Web Interface

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks PAN-OS

  • 9.0 Allunaffected
  • 9.1 Allunaffected
  • 10.1 Allunaffected
  • 10.2 Allunaffected
  • 10.0 Allunaffected
  • 8.1 to < 8.1.24affected

Palo Alto Networks Cloud NGFW

  • Allunaffected

Palo Alto Networks Prisma Access

  • Allunaffected

References