topic Re: CVE-2023-50164 Apache Struts Vulnerability in Advanced Threat Prevention Discussions

CVE-2023-50164 Apache Struts Vulnerability

Patricia_Tham — Tue, 02 Jan 2024 07:44:22 GMT

Hi I would like to enquire if any Palo Alto products are affected by the above vulnerability.

Thanks.

Re: CVE-2023-50164 Apache Struts Vulnerability

kiwi — Tue, 02 Jan 2024 12:42:10 GMT

Hi @Patricia_Tham ,

As per Palo Alto Networks Threat Vault, CVE-2023-50164 is covered in apps and threats update 8790.

Kind regards,

-Kim.

Re: CVE-2023-50164 Apache Struts Vulnerability

ymiyashita — Thu, 04 Jan 2024 00:16:26 GMT

PAN-OS is not using Apache Struts thus PAN-OS is not affected.

If you have the concern for another Palo Alto Networks products, please state it specifically (because there're various Palo Alto Networks products).

Re: CVE-2023-50164 Apache Struts Vulnerability

Sanchez78 — Wed, 24 Jan 2024 10:30:39 GMT

I have face some problem..

Re: CVE-2023-50164 Apache Struts Vulnerability

itsm_cpm — Fri, 20 Dec 2024 08:44:08 GMT

Hi All,

I am using NGFW palo alto, is CVE-2024-53677 affecting on the latest pan os version?

Re: CVE-2023-50164 Apache Struts Vulnerability

kiwi — Fri, 20 Dec 2024 09:31:53 GMT

Hi @itsm_cpm ,

You are protected if you have the correct content version.

To ensure that you are always protected from the latest threats (including those that have not yet been discovered), you must ensure that you keep your firewalls up-to-date with the latest content and software updates published by Palo Alto Networks.

Please check the threat vault for the latest information. As seen in the screenshot below, CVE-2024-53677 is covered in content version 8927 :

Kind regards,

-Kim.

Re: CVE-2023-50164 Apache Struts Vulnerability

Mipsen — Fri, 20 Dec 2024 19:31:43 GMT

This does not impact Palo Alto product directly. This is threat protection for devices protected by a Palo Alto that may be using Apache Struts.