Skip to content
CVE PROGRAM SOURCE RECORD7.0 High

CVE-2024-5911

PAN-OS: File Upload Vulnerability in the Panorama Web Interface

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

An arbitrary file upload vulnerability in Palo Alto Networks Panorama software enables an authenticated read-write administrator with access to the web interface to disrupt system processes and crash the Panorama. Repeated attacks eventually cause the Panorama to enter maintenance mode, which requires manual intervention to bring the Panorama back online.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks PAN-OS

Default version status: unaffected

  • 11.2unaffected
  • 11.1unaffected
  • 11.0unaffected
  • 10.2.0 to < 10.2.4affected
  • 10.1.0 to < 10.1.9affected

Palo Alto Networks Cloud NGFW

Default version status: unaffected

  • Allunaffected

Palo Alto Networks Prisma Access

Default version status: unaffected

  • Allunaffected

References