ID de Prueba:	1.3.6.1.4.1.25623.1.0.106977
Categoría:	Palo Alto PAN-OS Local Security Checks
Título:	Palo Alto PAN-OS Cross-Site Scripting Vulnerability
Resumen:	A vulnerability exists in the PAN-OS GlobalProtect external interface that;could allow for a cross-site scripting (XSS) attack.
Descripción:	Summary: A vulnerability exists in the PAN-OS GlobalProtect external interface that could allow for a cross-site scripting (XSS) attack. Vulnerability Insight: PAN-OS does not properly validate specific request parameters. Customers that have not configured GlobalProtect are not affected by this issue. Vulnerability Impact: Successful exploitation of this issue may allow an attacker to inject arbitrary Java script or HTML. Affected Software/OS: PAN-OS 6.1.17 and earlier, PAN-OS 7.0.15 and earlier, PAN-OS 7.1.10 and earlier, PAN-OS 8.0.2 and earlier. Solution: Update to PAN-OS 6.1.18, PAN-OS 7.0.16, PAN-OS 7.1.11, PAN-OS 8.0.3 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2017-9467 BugTraq ID: 99907 http://www.securityfocus.com/bid/99907 http://www.securitytracker.com/id/1038975
Copyright	Copyright (C) 2017 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.