CVE-2022-36067 (Protection against JavaScript Sandbox RCE) is it cover in any Palo Alto Signature

[JiaXiang]

Just want to know CVE-2022-36067 is it cover in any Palo Alto Signature ? 

I tried to search it in Threat Vault and Security Advisories also do not have information related to this CVE is that means Palo Alto firewall will not detect this vulnerability? 

[ymiyashita]

Currently, Palo Alto Networks is researching on the vulnerability. There's no signature available yet.

For your reference: "A vulnerability/CVE is released; when will the vulnerability signature[IPS] be released? Why do some CVEs not have vulnerability signatures? What is default action?"
https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u000000HAOnCAO

When there's an update, I can share the status here.

[JiaXiang]

Hi Ymiyashita, 

Thanks for your reply, according to the KB does it mean the signature will available soon? 

[ymiyashita]

Hi @JiaXiang,

Regarding this particular vulnerability (CVE-2022-36067), Palo Alto Networks is still researching on it. At this time, there's no ETA.

[JiaXiang]

Hi @ymiyashita ,

Any update for this CVE-2022-36067 ? 

Do you know usually for 1 vulnerability need how much time to research? 

[ymiyashita]

Currently, we are evaluating the potential coverage for CVE-2022-36067.
The time frame of the signature release really depends on the each vulnerabilities.
For a signature coverage request in general, you may want to open a support case (from the next time onwards) so that Palo Alto Networks can know how many customers are requesting for the coverage.

[ymiyashita · Accepted solution]

A signature (TID: 93195) for the vulnerability (CVE-2022-36067) was released in content version 8639.
https://threatvault.paloaltonetworks.com/?query=93195&type=

[JiaXiang]

Thank you for your update.

[StacyDavis]

Thanks for the link.