CVE-2019-17437: PAN-OS: Custom-role users may escalate privileges
An improper authentication check in Palo Alto Networks PAN-OS may allow an authenticated low privileged non-superuser custom role user to elevate privileges and become superuser. This issue affects PAN-OS 7.1 versions prior to 7.1.25; 8.0 versions prior to 8.0.20; 8.1 versions prior to 8.1.11; 9.0 versions prior to 9.0.5. PAN-OS version 7.0 and prior EOL versions have not been evaluated for this issue.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2019-17437?
CVE-2019-17437 is classified as a high severity vulnerability due to its potential to allow privilege escalation.
How do I fix CVE-2019-17437?
To fix CVE-2019-17437, upgrade to PAN-OS versions 7.1.25, 8.0.20, or 8.1.11 and above.
Who is affected by CVE-2019-17437?
CVE-2019-17437 affects users of Palo Alto Networks PAN-OS versions prior to 7.1.25, 8.0.20, and 8.1.11.
What type of users can exploit CVE-2019-17437?
CVE-2019-17437 can be exploited by authenticated low privileged non-superuser custom role users.
What systems are impacted by CVE-2019-17437?
CVE-2019-17437 impacts various versions of Palo Alto Networks PAN-OS including 7.1, 8.0, 8.1, and 9.0.