Vulnerability on VM Series

KishorTP — Wed, 04 Sep 2024 11:34:02 GMT

Hi Guys,

I have a few vulnerabilities on my vm-series firewall, which is hosted in AWS, which I'm mentioning below.

1. Palo Alto Networks (PAN-OS) Cleartext Exposure of External System Secrets Vulnerability (PAN-231823) CVE-2024-5916

2. Palo Alto Networks (PAN-OS) Improper Input Validation Vulnerability (CVE-2024-5913) CVE-2024-5913

I've checked the article & in the product description under the version, I could see Cloud NGFW and PAN-OS. Which is applicable to my env as my FW is a vm series palo alto.

If its Cloud NGFW, what is meant by the below comment.

Versions	Affected	Unaffected
Cloud NGFW	Before 8/15 on Azure, Before 8/23 on AWS	On or after 8/15 on Azure, On or after 8/23 on AWS

It will be automatically fixed after the mentioned date or anything to be done from my end.

I'm a bit confused and NEED YOUR ADVICE.

Re: Vulnerability on VM Series

JayGolf — Wed, 11 Sep 2024 03:50:41 GMT

Hi @KishorTP ,

Can you share the link of the article?

topic Vulnerability on VM Series in VM-Series in the Public Cloud

Vulnerability on VM Series

Re: Vulnerability on VM Series