This script is Copyright (C) 2016 Tenable Network Security, Inc.
The remote host is affected by multiple vulnerabilities.
The version of Palo Alto Networks PAN-OS running on the remote host is
6.1.x < 6.1.11. It is, therefore, affected by multiple vulnerabilities :
- An unspecified flaw exists that allows an authenticated,
remote attacker to access potentially sensitive
information in the system logs. (VulnDB 139991)
- A security bypass vulnerability exists in the XML API
that allows an authenticated, remote attacker with
superuser read-only permissions to bypass intended
restrictions and perform a commit. (VulnDB 139995)
See also :
Upgrade to Palo Alto Networks PAN-OS version 6.1.11 or later.
Risk factor :
Medium / CVSS Base Score : 4.0
CVSS Temporal Score : 3.3
Public Exploit Available : true
Get Nessus Professional to scan unlimited IPs, run compliance checks & moreBuy Nessus Professional Now