What is CVE-2017-9458?

CVE-2017-9458 is a security advisory published by Palo Alto Networks Security Advisories with Critical severity. CVE-2017-9458 XML External Entity (XXE) in PAN-OS

Which CVE IDs does CVE-2017-9458 cover?

CVE-2017-9458 covers the following CVE IDs: CVE-2017-9458. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2017-9458?

CVE-2017-9458 affects 1 product, including: PAN-OS.

CVE-2017-9458Critical

CVE-2017-9458 XML External Entity (XXE) in PAN-OS

Vendor

Palo Alto Networks Security Advisories

Published

August 30, 2017

Last Modified

August 30, 2017

🔗 CVE IDs covered (1)

CVE-2017-9458 →

📋 Description

A vulnerability exists in PAN-OS’s GlobalProtect internal and external gateway interface that could allow for XML External Entity (XXE) attack. PAN-OS does not properly parse XML input. (Ref # PAN-75688 / CVE-2017-9458) Successful exploitation of this issue may allow disclosure of information, denial of service or server side request forgery. This issue affects PAN-OS 6.1.17 and earlier, PAN-OS 7.0.16 and earlier, PAN-OS 7.1.11 and earlier, PAN-OS 8.0.2 and earlier

🎯 Affected products1

PAN-OS

✅ Remediation

PAN-OS 6.1.18 and later, PAN-OS 7.0.17 and later, PAN-OS 7.1.12 and later, PAN-OS 8.0.3 and later Workarounds and mitigations: Customers that have not configured GlobalProtect are not affected by this issue.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2017-9458