Palo Alto Networks PAN-OS Improper Input Neutralization Vulnerability in Management Web Interface Allowing Administrator Impersonation

A vulnerability allowing improper input neutralization has been identified in the management web interface of Palo Alto Networks PAN-OS software. This vulnerability enables a malicious authenticated read-write administrator to impersonate another legitimate authenticated PAN-OS administrator. Exploitation requires network access to the management web interface.

Impact

Successful exploitation allows an authenticated administrator to impersonate another administrator, potentially leading to unauthorized actions or access within the PAN-OS environment.

Remediation

Administrators are advised to upgrade to PAN-OS versions 11.2.5, 11.1.8, 10.2.13, or 10.1.14-h14. For all other unsupported PAN-OS versions, upgrade to a supported fixed version. Additionally, restrict management web interface access to trusted internal IP addresses, following Palo Alto Networks' critical deployment guidelines.