CVE-2018-10140

The PAN-OS Management Web Interface in Palo Alto Networks PAN-OS 8.1.2 and earlier may allow an authenticated user to shut down all management sessions, resulting in all logged in users to be redirected to the login page. PAN-OS 6.1, PAN-OS 7.1 and PAN-OS 8.0 are NOT affected.

Score

CVSS 3.0 4.3 Medium

Status

Modified - psirt@paloaltonetworks.com

Published

2018-08-16

Last modified

2024-09-16

Weaknesses

CWE-20

Affected products

• Pan-os (Palo Alto Networks)
• Pan-os (Paloaltonetworks)

References

• http://www.securityfocus.com/bid/105107
• http://www.securitytracker.com/id/1041545
• https://security.paloaltonetworks.com/CVE-2018-10140