The version of Palo Alto Networks PAN-OS running on the remote host is 10.1.x prior to 10.1.3-h4 or 10.1.x prior to 10.1.6-h9 or 10.1.x prior to 10.1.8-h8 or 10.1.x prior to 10.1.9-h14 or 10.1.x prior to 10.1.10-h9 or 10.1.x prior to 10.1.11-h10 or 10.1.x prior to 10.1.12-h3 or 10.1.x prior to 10.1.13-h5 or 10.1.x prior to 10.1.14-h6 or 10.2.x prior to 10.2.0-h4 or 10.2.x prior to 10.2.1-h3 or 10.2.x prior to 10.2.2-h6 or 10.2.x prior to 10.2.3-h14 or 10.2.x prior to 10.2.4-h32 or 10.2.x prior to 10.2.5-h9 or 10.2.x prior to 10.2.6-h6 or 10.2.x prior to 10.2.7-h18 or 10.2.x prior to 10.2.8-h15 or 10.2.x prior to 10.2.9-h16 or 10.2.x prior to 10.2.10-h9 or 10.2.x prior to 10.2.11-h6 or 10.2.x prior to 10.2.12-h2 or 11.0.x prior to 11.0.0-h4 or 11.0.x prior to 11.0.1-h5 or 11.0.x prior to 11.0.2-h5 or 11.0.x prior to 11.0.3-h13 or 11.0.x prior to 11.0.4-h6 or 11.0.x prior to 11.0.5-h2 or 11.0.x prior to 11.0.6-h1 or 11.1.x prior to 11.1.0-h4 or 11.1.x prior to 11.1.1-h2 or 11.1.x prior to 11.1.2-h15 or 11.1.x prior to 11.1.3-h11 or 11.1.x prior to 11.1.4-h7 or 11.1.x prior to 11.1.5-h1 or 11.2.x prior to 11.2.0-h1 or 11.2.x prior to 11.2.1-h1 or 11.2.x prior to 11.2.2-h2 or 11.2.x prior to 11.2.3-h3 or 11.2.x prior to 11.2.4-h1. It is, therefore, affected by a vulnerability.

    A privilege escalation vulnerability in Palo Alto Networks PAN-OS software allows a PAN-OS administrator     with access to the management web interface to perform actions on the firewall with root privileges.

    This issue is applicable to PAN-OS 10.1, PAN-OS 10.2, PAN-OS 11.0, PAN-OS 11.1, and PAN-OS 11.2 software     on PA-Series, VM-Series, and CN-Series firewalls and on Panorama (virtual and M-Series)and WildFire     appliances.

    Cloud NGFW and Prisma Access are not impacted by this vulnerability.

Tenable has extracted the preceding description block directly from the PAN-OS security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

medium Nessus Plugin ID 211513

Version 1.2