CVE-2023-50164 Apache Struts Vulnerability

[Patricia_Tham]

Hi I would like to enquire if any Palo Alto products are affected by the above vulnerability. 

Thanks. 

[kiwi]

Hi @Patricia_Tham ,

As per Palo Alto Networks Threat Vault, CVE-2023-50164 is covered in apps and threats update 8790.

Kind regards,

-Kim.

[ymiyashita]

PAN-OS is not using Apache Struts thus PAN-OS is not affected.

If you have the concern for another Palo Alto Networks products, please state it specifically (because there're various Palo Alto Networks products).

[Sanchez78]

I have face some problem..

[itsm_cpm]

Hi All,

I am using NGFW palo alto, is CVE-2024-53677 affecting on the latest pan os version?

[kiwi]

Hi @itsm_cpm ,

You are protected if you have the correct content version. 

To ensure that you are always protected from the latest threats (including those that have not yet been discovered), you must ensure that you keep your firewalls up-to-date with the latest content and software updates published by Palo Alto Networks. 

Please check the threat vault for the latest information. As seen in the screenshot below, CVE-2024-53677 is covered in content version 8927 :

Kind regards,

-Kim.

[Mipsen]

This does not impact Palo Alto product directly. This is threat protection for devices protected by a Palo Alto that may be using Apache Struts.