The Management Web Interface in Palo Alto Networks PAN-OS prior to 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters.
paloaltonetworks pan-os