https://live.paloaltonetworks.com/t5/advanced-threat-prevention/cve-2024-0012-pan-os-authentication-bypass-in-the-management-web/m-p/999673#M2393 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/70303">@StratogentNetworkTeam</a>&nbsp;</P> <P>&nbsp;</P> <P>Based on your statement, it is recommended to upgrade the device to the preferred version as it is considered the most stable version. However, it is important to note that the decision to upgrade depends on the specific environment and any issues that may arise.</P> <P>If you encounter any issues with the preferred release and the issue has been addressed in the latest version, it may be advisable to upgrade to the latest version.</P> <P>Furthermore, if you have a test environment, it is recommended to validate the PAN-OS before performing the upgrade in the production environment. This will help ensure that the upgrade will not cause any unexpected issues or disruptions.</P> Fri, 27 Dec 2024 01:33:27 GMT mshekh 2024-12-27T01:33:27Z https://live.paloaltonetworks.com/t5/advanced-threat-prevention/cve-2024-0012-pan-os-authentication-bypass-in-the-management-web/m-p/644716#M2364 <P>It is suggested to upgrade to version 10.2.12-h2 to remediate the vulnerability. However, the firmware version 10.2.12-h2 is currently in monitoring status. It is also mentioned that the same fix is available in version 10.2.10-h9, which is the preferred version.</P> <P>My question is: if the fix is available in the preferred version, why recommend upgrading to a version that is still in monitoring status?</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="StratogentNetworkTeam_0-1732216517067.png" style="width: 400px;"><img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/64217i8140CE694533C480/image-size/medium/is-moderation-mode/true?v=v2&amp;px=400" role="button" title="StratogentNetworkTeam_0-1732216517067.png" alt="StratogentNetworkTeam_0-1732216517067.png" /></span></P> <P>&nbsp;</P> Thu, 21 Nov 2024 19:16:43 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/cve-2024-0012-pan-os-authentication-bypass-in-the-management-web/m-p/644716#M2364 StratogentNetworkTeam 2024-11-21T19:16:43Z https://live.paloaltonetworks.com/t5/advanced-threat-prevention/cve-2024-0012-pan-os-authentication-bypass-in-the-management-web/m-p/999673#M2393 <P>Hi&nbsp;<a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/70303">@StratogentNetworkTeam</a>&nbsp;</P> <P>&nbsp;</P> <P>Based on your statement, it is recommended to upgrade the device to the preferred version as it is considered the most stable version. However, it is important to note that the decision to upgrade depends on the specific environment and any issues that may arise.</P> <P>If you encounter any issues with the preferred release and the issue has been addressed in the latest version, it may be advisable to upgrade to the latest version.</P> <P>Furthermore, if you have a test environment, it is recommended to validate the PAN-OS before performing the upgrade in the production environment. This will help ensure that the upgrade will not cause any unexpected issues or disruptions.</P> Fri, 27 Dec 2024 01:33:27 GMT https://live.paloaltonetworks.com/t5/advanced-threat-prevention/cve-2024-0012-pan-os-authentication-bypass-in-the-management-web/m-p/999673#M2393 mshekh 2024-12-27T01:33:27Z