The Management Web Interface in Palo Alto Networks PAN-OS before 7.1.9 allows remote authenticated users to gain privileges via unspecified request parameters.
https://security.paloaltonetworks.com/CVE-2017-7218
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-16253