Threats tagged 'ghsa-ww6g-3h8v-p3mx'

An information disclosure vulnerability in Palo Alto Networks PAN-OS software allows an unauthenticated attacker with network access to the management web interface to obtain web session tokens. Exploitation requires a legitimate user to click a malicious link. The vulnerability affects PAN-OS on PA-Series and VM-Series firewalls and Panorama (virtual and M-Series). Cloud NGFW and Prisma Access are not impacted. Restricting management interface access to trusted internal IPs reduces risk.