Palo Alto Networks PAN-OS 7.0.0 LDAP Authentication Bypass (PAN-SA-2015-0005)
Critical Nessus Plugin ID 85535
SynopsisThe remote host is affected by an authentication security bypass vulnerability.
DescriptionThe remote host is running Palo Alto Networks PAN-OS version 7.0.0. It is, therefore, affected by an unspecified flaw in the LDAP authentication process. A remote attacker can exploit this to bypass authentication checks presented by the captive portal component or the device management interfaces.
SolutionUpgrade to Palo Alto Networks PAN-OS 7.0.1 or later.