medium4.9
CVE-2024-5917
A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative web interface as a …
Impact
A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative web interface as a proxy, which enables the attacker to view internal network resources not otherwise accessible.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paloaltonetworks | Pan-Os | from 10.1.0 before 10.1.7 from 10.2.0 before 10.2.2 |