Description
An improper access control vulnerability in PAN-OS software enables an attacker with authenticated access to GlobalProtect portals and gateways to connect to the EC2 instance metadata endpoint for VM-Series firewalls hosted on Amazon AWS. Exploitation of this vulnerability enables an attacker to perform any operations allowed by the EC2 role in AWS. This issue impacts: PAN-OS 8.1 versions earlier than PAN-OS 8.1.20 VM-Series firewalls; PAN-OS 9.1 versions earlier than PAN-OS 9.1.11 VM-Series firewalls; PAN-OS 9.0 versions earlier than PAN-OS 9.0.14 VM-Series firewalls; PAN-OS 10.0 versions earlier than PAN-OS 10.0.8 VM-Series firewalls. Prisma Access customers are not impacted by this issue.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None
Affected products
- Palo Alto Networks / pan-os10.1.* – 10.1.*
- Palo Alto Networks / pan-os9.1 – 9.1.11
- Palo Alto Networks / pan-os8.1 – 8.1.20
- Palo Alto Networks / pan-os9.0 – 9.0.14
- Palo Alto Networks / pan-os10.0 – 10.0.8
- Palo Alto Networks / Prisma Access2.1 all – 2.1 all
- Palo Alto Networks / Prisma Access2.2 all – 2.2 all