Summaryinfo

A vulnerability identified as critical has been detected in PAN-OS up to 5.0.15/6.0.7/6.1.3. Affected is an unknown function of the component XML Handler. This manipulation causes xml external entity reference. The identification of this vulnerability is CVE-2015-4162. There is no exploit available. You should upgrade the affected component.

Detailsinfo

A vulnerability was found in PAN-OS up to 5.0.15/6.0.7/6.1.3 (Firewall Software). It has been declared as critical. Affected by this vulnerability is some unknown functionality of the component XML Handler. The manipulation with an unknown input leads to a xml external entity reference vulnerability. The CWE definition for the vulnerability is CWE-611. The product processes an XML document that can contain XML entities with URIs that resolve to documents outside of the intended sphere of control, causing the product to embed incorrect documents into its output. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

XML external entity (XXE) vulnerability in the management interface in PAN-OS before 5.0.16, 6.x before 6.0.8, and 6.1.x before 6.1.4 allows remote authenticated administrators to obtain sensitive information via crafted XML data.

The weakness was shared 06/02/2015 (Website). It is possible to read the advisory at securityadvisories.paloaltonetworks.com. This vulnerability is known as CVE-2015-4162 since 06/02/2015. The attack can be launched remotely. A single authentication is required for exploitation. The technical details are unknown and an exploit is not publicly available.

Upgrading to version 5.0.16, 6.0.8 or 6.1.4 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at SecurityFocus (BID 74941†). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Type

• Firewall Software

Name

• PAN-OS

Version

• 5.0.0
• 5.0.1
• 5.0.2
• 5.0.3
• 5.0.4
• 5.0.5
• 5.0.6
• 5.0.7
• 5.0.8
• 5.0.9
• 5.0.10
• 5.0.11
• 5.0.12
• 5.0.13
• 5.0.14
• 5.0.15
• 6.0.0
• 6.0.1
• 6.0.2
• 6.0.3
• 6.0.4
• 6.0.5
• 6.0.6
• 6.0.7
• 6.1.0
• 6.1.1
• 6.1.2
• 6.1.3

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion