topic Re: Vulneability SQL Injection in General Topics

Vulneability SQL Injection

SachinDahale — Wed, 27 Sep 2017 10:43:14 GMT

Hi,

we have done some Vulnerability assessment on firewall with PAN-OS version 7.1.8 version. And found below vulnerability for which we are not able to find CVE or solution. Help me to find a solution for below:

Vulnerability : CGI Generic SQL Injection (blind) - 443/tcp
Synopsis :
A CGI application hosted on the web server running on this host is potentially prone to SQL injection attack.

Description :
By sending specially crafted parameters to one or more CGI scripts hosted on the web server
running on this host, Nessus was able to get very different response, which suggests that it may have been
able to modify the behaviour of the application and directly access the underlying database.
An attacker may be able to exploit this issue to bypass authentication,read confidential data, modify the remote database,
or even take control of the operating system.
Note that this script is experimental and may be prone to false positives.

Solution :
Modify the affected CGI scripts so that they properly escape arguments.

regards,

Sachin

Re: Vulneability SQL Injection

BPry — Wed, 27 Sep 2017 13:52:08 GMT

@SachinDahale,

So I just scanned this on one of my firewalls utilizing Nessus Professional and did not locate the listed vulnerability on 8.0.4; so it would appear that Palo Alto has fixed this in later releases, although I'm not positive what version specifically. I would try updating your box to the 7.1.11 or 7.1.12 release and rescanning, if still present then it must be a fix within the 8.0.* line.

Re: Vulneability SQL Injection

SachinDahale — Thu, 28 Sep 2017 10:26:16 GMT

@BPry,

Thanks for quick reply. I will be awaiting your update on 7.1.11 PANOS version about this vulnerability.

🙂

Regards,

Sachin