topic Re: Palo Alto Firewall CVE-2022-2884 in Advanced Threat Prevention Discussions

Palo Alto Firewall CVE-2022-2884

Johnson_Tan — Thu, 25 Aug 2022 03:40:51 GMT

Hi,

Does anyone know if GitLab Remote Command Execution Vulnerability is covered with Palo Alto AV Signature?

Is Palo Alto affected by it?

I was not able to find it in their Security Advisories.

Vulnerability Details:

Title	GitLab Remote Command Execution Vulnerability
CVE ID	CVE-2022-2884
CVE Summary	GitLab Community Edition and GitLab Enterprise Edition are prone to remote code-execution vulnerabilities via GitHub Import. An attacker can leverage this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial of service conditions. The vulnerability has a CVSS base score of 9.9.
Link(s)	https://about.gitlab.com/releases/2022/08/22/critical-security-release-gitlab-15-3-1-released/

Please note you are posting a public message where community members and experts can provide assistance. Sharing private information such as serial numbers or company information is not recommended.

Re: Palo Alto Firewall CVE-2022-2884

OtakarKlier — Mon, 29 Aug 2022 19:31:53 GMT

Hello,

Here is the PAN threat vault.

https://threatvault.paloaltonetworks.com/

I did a quick search and didnt find it. I bet PAN is working on one.

Regards,

Re: Palo Alto Firewall CVE-2022-2884

ymiyashita — Tue, 10 Jan 2023 02:27:27 GMT

A signature was already released. It's a vulnerability protection signature (not an AV signature).
https://threatvault.paloaltonetworks.com/?query=CVE-2022-2884&type=

Palo Alto Networks Firewall is not using GitLab, thus not affected by CVE-2022-2884.