The version of Palo Alto Networks PAN-OS running on the remote host is 8.1.x prior to 8.1.20 or 9.0.x prior to 9.0.14 or 9.1.x prior to 9.1.11 or 10.0.x prior to 10.0.8. It is, therefore, affected by a vulnerability.

  - An improper access control vulnerability in PAN-OS software enables an attacker with authenticated access     to GlobalProtect portals and gateways to connect to the EC2 instance metadata endpoint for VM-Series     firewalls hosted on Amazon AWS. (CVE-2021-3062)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

CVE-2021-3062

high

Tenable Plugins

high