CVE-2024-5920
14.11.2024, 10:15
A cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write Panorama administrator to push a specially crafted configuration to a PAN-OS node. This enables impersonation of a legitimate PAN-OS administrator who can perform restricted actions on the PAN-OS node after the execution of JavaScript in the legitimate PAN-OS administrator's browser.
| Vendor | Product | Version |
|---|---|---|
| paloaltonetworks | pan-os | 10.1.0 ≤ 𝑥 < 10.1.14 |
| paloaltonetworks | pan-os | 10.2.0 ≤ 𝑥 < 10.2.11 |
| paloaltonetworks | pan-os | 11.0.0 ≤ 𝑥 < 11.0.6 |
| paloaltonetworks | pan-os | 11.1.0 ≤ 𝑥 < 11.1.4 |
𝑥
= Vulnerable software versions