CVE-2022-0030: PAN-OS: Authentication Bypass in Web Interface

Q: What is CVE-2022-0030?

CVE-2022-0030 is an authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface.

Q: How does CVE-2022-0030 affect Palo Alto Networks PAN-OS?

CVE-2022-0030 affects Palo Alto Networks PAN-OS 8.1 versions between 8.1.0 and 8.1.24.

Q: What is the severity of CVE-2022-0030?

CVE-2022-0030 has a severity rating of high (8.1).

Q: How can an attacker exploit CVE-2022-0030?

An attacker with specific knowledge of the target firewall or Panorama appliance can impersonate an existing PAN-OS administrator and perform privileged actions.

Q: Is there a fix available for CVE-2022-0030?

Yes, Palo Alto Networks has released a security advisory with mitigation steps for CVE-2022-0030. Please refer to the official reference for more details.

Published Oct 12, 2022

Updated

An authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface allows a network-based attacker with specific knowledge of the target firewall or Panorama appliance to impersonate an existing PAN-OS administrator and perform privileged actions.

Affected Software

1 affected component

Palo Alto Networks PAN-OS>=8.1.0<8.1.24

Remediation

Information

This issue is fixed in PAN-OS 8.1.24 and all later PAN-OS versions. Please note that PAN-OS 8.1 has reached its software end-of-life (EoL) and is supported only on PA-200, PA-500, and PA-5000 Series firewalls and on M-100 appliances and only until each of their respective hardware EoL dates: https://www.paloaltonetworks.com/services/support/end-of-life-announcements/hardware-end-of-life-dates.html.

Event History

Oct 12, 2022

CVE Published

via MITRE·04:30 PM

Data Sourced

via MITRE·04:30 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2022-0030?

CVE-2022-0030 is an authentication bypass vulnerability in the Palo Alto Networks PAN-OS 8.1 web interface.

How does CVE-2022-0030 affect Palo Alto Networks PAN-OS?