Panorama Suite Unnecessary Permissions on Private Key Certificates Vulnerability

A vulnerability exists in Panorama Suite 2025 installations prior to update PS-2500-00-0357, where certificates and their private keys installed via the Network and Security tool are granted unnecessary access rights to the operator group. This issue does not affect installations on Panorama Suite 2025 Updated Dec. 25.

Impact

The vulnerability allows the operator group to access private keys of certain certificates, which could lead to unauthorized use of those keys.

Remediation

Users can update to Panorama Suite 2025 (Updated Dec. 25) or version PS-2500-00-0357 or later. For certificates installed with earlier versions, the private key permissions must be manually corrected by removing the Operators group access. This can be done through the computer certificate management console.