Palo Alto Networks PAN-OS Unauthorized Packet Capture Data Disclosure Vulnerability
A vulnerability exists in Palo Alto Networks PAN-OS® software that allows unlicensed administrators to view clear-text data in decrypted HTTP/2 data streams on network firewall interfaces. Under normal circumstances, decrypted packet captures require a free Decryption Port Mirror license to be accessed by firewall administrators. To exploit this issue, an administrator must first gain network access to the management interface and successfully authenticate. The vulnerability only affects HTTP/2 data streams, with HTTP/1.1 streams remaining unaffected. Palo Alto Networks recommends reducing risk by restricting management interface access to trusted administrators from internal IP addresses. Cloud NGFW customer firewall administrators cannot access the packet capture feature, which remains available only to authorized Palo Alto Networks personnel for troubleshooting purposes. Prisma® Access is not impacted by this vulnerability.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
paloaltonetworks pan-os 11.2.5 |
||
paloaltonetworks pan-os 11.2.4 |
||
paloaltonetworks pan-os 11.2.3 |
||
paloaltonetworks pan-os 11.2.2 |
||
paloaltonetworks pan-os 11.2.1 |
||
paloaltonetworks pan-os 11.2.0 |
||
paloaltonetworks pan-os 11.1.6 |
||
paloaltonetworks pan-os 11.1.5 |
||
paloaltonetworks pan-os 11.1.4 |
||
paloaltonetworks pan-os 11.1.3 |
||
paloaltonetworks pan-os 11.1.2 |
||
paloaltonetworks pan-os 11.1.1 |
||
paloaltonetworks pan-os 11.1.0 |
||
paloaltonetworks pan-os 10.2.14 |
||
paloaltonetworks pan-os 10.2.13 |
||
paloaltonetworks pan-os 10.2.12 |
||
paloaltonetworks pan-os 10.2.11 |
||
paloaltonetworks pan-os 10.2.10 |
||
paloaltonetworks pan-os 10.2.9 |
||
paloaltonetworks pan-os 10.2.8 |
||
paloaltonetworks pan-os 10.2.7 |
||
paloaltonetworks pan-os 10.2.6 |
||
paloaltonetworks pan-os 10.2.5 |
||
paloaltonetworks pan-os 10.2.4 |
||
paloaltonetworks pan-os 10.2.3 |
||
paloaltonetworks pan-os 10.2.2 |
||
paloaltonetworks pan-os 10.2.1 |
||
paloaltonetworks pan-os 10.2.0 |
||
paloaltonetworks pan-os 10.1.14 |
||
paloaltonetworks pan-os 10.1.13 |
||
paloaltonetworks pan-os 10.1.12 |
||
paloaltonetworks pan-os 10.1.11 |
||
paloaltonetworks pan-os 10.1.10 |
||
paloaltonetworks pan-os 10.1.9 |
||
paloaltonetworks pan-os 10.1.8 |
||
paloaltonetworks pan-os 10.1.7 |
||
paloaltonetworks pan-os 10.1.6 |
||
paloaltonetworks pan-os 10.1.5 |
||
paloaltonetworks pan-os 10.1.4 |
||
paloaltonetworks pan-os 10.1.3 |
||
paloaltonetworks pan-os 10.1.2 |
||
paloaltonetworks pan-os 10.1.1 |
||
paloaltonetworks pan-os 10.1.0 |
||
palo alto networks cloud ngfw |
||
palo alto networks pan-os |
||
palo alto networks prisma access |
Vulmon