This vulnerability (CWE-918) in Palo Alto Networks PAN-OS software enables an authenticated administrator with network access to the management web interface to perform SSRF attacks, making unauthorized requests from the firewall to internal services. The issue specifically affects the Cloud NGFW product. The risk is mitigated by restricting management interface access to trusted internal IP addresses. Other Palo Alto Networks products such as Panorama and Prisma Access are not affected. No vendor advisory or patch information is currently available.

An authenticated administrator with network access to the management web interface can exploit this SSRF vulnerability to send unauthorized requests from the firewall to internal services. This could potentially allow access or interaction with internal network resources that should not be accessible. The overall severity is rated medium (CVSS 4.7). The risk is minimized if management interface access is properly restricted to trusted internal IP addresses.

No official patch or remediation level has been confirmed by the vendor. The vendor recommends restricting management interface access to trusted internal IP addresses as a best practice to minimize risk. Monitor the vendor advisory for updates on patches or official fixes.