Summaryinfo

A vulnerability identified as critical has been detected in Palo Alto PAN-OS 5.0.5. The impacted element is an unknown function of the component Certificate Handler. Performing a manipulation results in improper authentication. In addition, an exploit is available. You should upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, was found in Palo Alto PAN-OS 5.0.5 (Firewall Software). This affects some unknown functionality of the component Certificate Handler. The manipulation with an unknown input leads to a improper authentication vulnerability. CWE is classifying the issue as CWE-287. When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct. This is going to have an impact on confidentiality, and integrity.

The weakness was presented 01/22/2014 as DOC-6600 as confirmed advisory (Website). It is possible to read the advisory at live.paloaltonetworks.com. It is possible to initiate the attack remotely. Technical details are unknown but a public exploit is available.

After immediately, there has been an exploit disclosed. It is declared as proof-of-concept.

Upgrading to version 6.0 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

The vulnerability is also documented in the vulnerability database at OSVDB (102405†). See VDB-12059, VDB-12060, VDB-12061 and VDB-12062 for similar entries. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Firewall Software

Vendor

• Palo Alto

Name

• PAN-OS

Version

• 5.0.5

License

• commercial

Website

• Vendor: https://www.paloaltonetworks.com/

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion