Palo Alto Networks PAN-OS Session Token Disclosure Vulnerability

A vulnerability allowing information disclosure has been identified in Palo Alto Networks PAN-OS software. This issue enables an authenticated administrator to access session tokens of users logged into the firewall web UI. The leaked session tokens could be used to impersonate those users. The risk associated with this vulnerability is notably reduced when CLI access is limited to a select group of administrators. It is important to note that Cloud NGFW and Prisma Access are not impacted by this vulnerability.

Impact

Exploitation of this vulnerability could lead to unauthorized impersonation of users whose session tokens are exposed.

Remediation

Users can upgrade to PAN-OS 11.2.8 or later, PAN-OS 11.1.12 or later, or PAN-OS 10.2.17 or later. For older, unsupported PAN-OS versions, upgrading to a supported fixed version is recommended.