topic Re: CVE-2022-36067 (Protection against JavaScript Sandbox RCE) is it cover in any Palo Alto Signature in Advanced Threat Prevention Discussions

CVE-2022-36067 (Protection against JavaScript Sandbox RCE) is it cover in any Palo Alto Signature

JiaXiang — Wed, 19 Oct 2022 09:41:33 GMT

Just want to know CVE-2022-36067 is it cover in any Palo Alto Signature ?

I tried to search it in Threat Vault and Security Advisories also do not have information related to this CVE is that means Palo Alto firewall will not detect this vulnerability?

Re: CVE-2022-36067 (Protection against JavaScript Sandbox RCE) is it cover in any Palo Alto Signature

ymiyashita — Thu, 20 Oct 2022 01:16:18 GMT

Currently, Palo Alto Networks is researching on the vulnerability. There's no signature available yet.

For your reference: "A vulnerability/CVE is released; when will the vulnerability signature[IPS] be released? Why do some CVEs not have vulnerability signatures? What is default action?"
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAOnCAO

When there's an update, I can share the status here.

Re: CVE-2022-36067 (Protection against JavaScript Sandbox RCE) is it cover in any Palo Alto Signature

JiaXiang — Thu, 20 Oct 2022 09:06:24 GMT

Hi Ymiyashita,

Thanks for your reply, according to the KB does it mean the signature will available soon?

Re: CVE-2022-36067 (Protection against JavaScript Sandbox RCE) is it cover in any Palo Alto Signature

ymiyashita — Fri, 21 Oct 2022 00:49:22 GMT

Hi @JiaXiang,

Regarding this particular vulnerability (CVE-2022-36067), Palo Alto Networks is still researching on it. At this time, there's no ETA.

Re: CVE-2022-36067 (Protection against JavaScript Sandbox RCE) is it cover in any Palo Alto Signature

JiaXiang — Fri, 28 Oct 2022 00:11:31 GMT

Hi @ymiyashita ,

Any update for this CVE-2022-36067 ?

Do you know usually for 1 vulnerability need how much time to research?

Re: CVE-2022-36067 (Protection against JavaScript Sandbox RCE) is it cover in any Palo Alto Signature

ymiyashita — Fri, 28 Oct 2022 02:17:11 GMT

Currently, we are evaluating the potential coverage for CVE-2022-36067.
The time frame of the signature release really depends on the each vulnerabilities.
For a signature coverage request in general, you may want to open a support case (from the next time onwards) so that Palo Alto Networks can know how many customers are requesting for the coverage.

Re: CVE-2022-36067 (Protection against JavaScript Sandbox RCE) is it cover in any Palo Alto Signature

ymiyashita — Fri, 04 Nov 2022 03:32:39 GMT

A signature (TID: 93195) for the vulnerability (CVE-2022-36067) was released in content version 8639.
https://threatvault.paloaltonetworks.com/?query=93195&type=

Re: CVE-2022-36067 (Protection against JavaScript Sandbox RCE) is it cover in any Palo Alto Signature

JiaXiang — Fri, 04 Nov 2022 05:29:03 GMT

Thank you for your update.

Re: CVE-2022-36067 (Protection against JavaScript Sandbox RCE) is it cover in any Palo Alto Signature

StacyDavis — Fri, 16 Dec 2022 05:47:50 GMT

Thanks for the link.