Test ID:	1.3.6.1.4.1.25623.1.0.105628
Category:	Palo Alto PAN-OS Local Security Checks
Title:	Palo Alto PAN-OS HTTP Header Evasion Vulnerability (PAN-SA-2016-0006)
Summary:	An evasion was identified whereby a user could specially craft an HTTP header; to evade URL filtering on Palo Alto Networks firewalls.
Description:	Summary: An evasion was identified whereby a user could specially craft an HTTP header to evade URL filtering on Palo Alto Networks firewalls. Vulnerability Impact: The HTTP header evasion technique can be used by a malicious insider to bypass URL filtering policy. It is not a product vulnerability that affects the security or integrity of the firewall itself. Affected Software/OS: PAN-OS releases 5.0.X, 6.0.X, 6.1.X, 7.0.X and 7.1.0. Solution: Customers concerned with this evasion technique are advised to upgrade to PAN-OS 7.1.1 and to enable threat signatures #14984 and #14978. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
Copyright	Copyright (C) 2016 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.