PAN OS vulnerability

Manu_Shankar — Tue, 20 Oct 2020 16:31:36 GMT

I have a Palo Alto (PA-5220) HA pair with software running (SW: 9.0.9-h1, Global-protect version: 5.1.3). I found below vulnerabilities are affecting the current PAN OS. I am planning to upgrade it. Could you please suggest the best recommended software with Global protect version for my firewall.

Model: PA-5220

Software Version: SW: 9.0.9-h1, global-protect-client-package-version: 5.1.3

Vulnerabilities affecting the current PAN OS:

---------------------------------------------------------

CVE-2020-2037 PAN-OS: OS command injection vulnerability in the management web interface

CVE-2020-2039 PAN-OS: Management web interface denial-of-service (DoS) through unauthenticated file upload

CVE-2020-2043 PAN-OS: Passwords may be logged in clear text when using after-change-detail custom syslog field for config logs

CVE-2020-2044 PAN-OS: Passwords may be logged in clear text while storing operational command (op command) history

Thanks,

Manu

topic PAN OS vulnerability in General Topics

PAN OS vulnerability

Re: PAN OS vulnerability