CVE-2021-44228 / Panorama

cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements
We are conducting regularly scheduled maintenance over the weekend, which could cause some downtime on LIVEcommunity. We apologize for any inconvenience.

CVE-2021-44228 / Panorama

L3 Networker

As most are aware, Panorama running 9.x are affected by log4j vulnerability.   The security advisory mentions "This issue is only applicable to Panorama hardware and virtual appliances that have run in Panorama Mode or Log Collector Mode as part of a Collector Group. Panoramas running in Management Only Mode are not impacted."

 

Does anyone know if Panoramas running in "legacy mode" are affected?

1 ACCEPTED SOLUTION

Accepted Solutions

L6 Presenter

Hello @MikeC 

 

there was an update from Palo Alto regarding "Legacy" Panorama Mode: https://security.paloaltonetworks.com/CVE-2021-44228

 

It is listed as not impacted:

Panoramas running in Management Only mode or Legacy mode, including those used for Prisma Access, are not impacted.

 

Kind Regads

Pavel

 

 

Help the community: Like helpful comments and mark solutions.

View solution in original post

5 REPLIES 5

L0 Member

is PAN-OS v8.0.18 affected with log4j CVE-2021-44228 vulnerability ? Can anyone confirm me please . 

@singhpradeep25 not sure but 8.0 is end of life for almost 2 years now.   I would recommend you upgrade

L6 Presenter

Hello @MikeC 

 

there was an update from Palo Alto regarding "Legacy" Panorama Mode: https://security.paloaltonetworks.com/CVE-2021-44228

 

It is listed as not impacted:

Panoramas running in Management Only mode or Legacy mode, including those used for Prisma Access, are not impacted.

 

Kind Regads

Pavel

 

 

Help the community: Like helpful comments and mark solutions.

thanks @PavelK I confirmed the same with support today.   Thanks for the link

L0 Member

@MikeC @PavelK  Thanks for quick response . I will upgrade it .

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!