CVE-2024-9471
PAN-OS: Privilege Escalation (PE) Vulnerability in XML API
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
PAN-OS: Privilege Escalation (PE) Vulnerability in XML API
A privilege escalation (PE) vulnerability in the XML API of Palo Alto Networks PAN-OS software enables an authenticated PAN-OS administrator with restricted privileges to use a compromised XML API key to perform actions as a higher privileged PAN-OS administrator. For example, an administrator with "Virtual system administrator (read-only)" access could use an XML API key of a "Virtual system administrator" to perform write operations on the virtual system configuration even though they should be limited to read-only operations.
Reserved 2024-10-03 | Published 2024-10-09 | Updated 2024-10-18 | Assigner palo_altoCWE-269 Improper Privilege Management
| 2024-10-09: | Initial publication |
Palo Alto Networks thanks an external reporter for discovering and reporting this issue.
security.paloaltonetworks.com/CVE-2024-9471
Support options
