Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2025-0109

PAN-OS: Unauthenticated File Deletion Vulnerability on the Management Web Interface

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

An unauthenticated file deletion vulnerability in the Palo Alto Networks PAN-OS management web interface enables an unauthenticated attacker with network access to the management web interface to delete certain files as the “nobody” user; this includes limited logs and configuration files but does not include system files. You can greatly reduce the risk of this issue by restricting access to the management web interface to only trusted internal IP addresses according to our recommended best practices deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 . This issue does not affect Cloud NGFW or Prisma Access software.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks Cloud NGFW

Default version status: unaffected

  • Allunaffected

Palo Alto Networks PAN-OS

Default version status: unaffected

  • 10.1.0 to < 10.1.14-h9affected
  • 10.2.0 to < 10.2.7-h24affected
  • 11.1.0 to < 11.1.6-h1affected
  • 11.2.0 to < 11.2.4-h4affected

Palo Alto Networks Prisma Access

Default version status: unaffected

  • Allunaffected

References