A vulnerability classified as problematic has been found in Palo Alto Networks PAN-OS, Prisma Access and Cloud NGFW (Firewall Software) (affected version unknown). This affects an unknown functionality of the component Link Handler. The manipulation with an unknown input leads to a cross site scripting vulnerability. CWE is classifying the issue as CWE-79. The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. This is going to have an impact on integrity. The summary by CVE is:

A DOM-Based cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS software enables a remote attacker to execute a JavaScript payload in the context of an administrator’s browser when they view a specifically crafted link to the PAN-OS web interface.

The weakness was released 12/13/2023 by Kajetan Rostojek. The advisory is shared at security.paloaltonetworks.com. This vulnerability is uniquely identified as CVE-2023-6790 since 12/13/2023. It demands that the victim is doing some kind of user interaction. Neither technical details nor an exploit are publicly available. MITRE ATT&CK project uses the attack technique T1059.007 for this issue.

Upgrading eliminates this vulnerability.

Productinfo

Type

• Firewall Software

Vendor

• Palo Alto Networks

Name

• Cloud NGFW
• PAN-OS
• Prisma Access

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion