What is CVE-2019-1575?

CVE-2019-1575 is a security advisory published by Palo Alto Networks Security Advisories with High severity. CVE-2019-1575 Information Disclosure in PAN-OS Management API Usage

Which CVE IDs does CVE-2019-1575 cover?

CVE-2019-1575 covers the following CVE IDs: CVE-2019-1575. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2019-1575?

CVE-2019-1575 affects 1 product, including: PAN-OS.

CVE-2019-1575High

CVE-2019-1575 Information Disclosure in PAN-OS Management API Usage

Vendor

Palo Alto Networks Security Advisories

Published

July 15, 2019

Last Modified

July 15, 2019

🔗 CVE IDs covered (1)

CVE-2019-1575 →

📋 Description

An Information Disclosure vulnerability exists in PAN-OS Management API usage (Ref # PAN-107239 and PAN-118869 / CVE-2019-1575) Successful exploitation may allow for an authenticated user with read-only privileges to extract the API key of the device and the username/password from the XML API (in PAN-OS) and possibly escalate privileges granted to them. This issue affects PAN-OS 7.1.23 and earlier, PAN-OS 8.0.18 and earlier, PAN-OS 8.1.8-h4 and earlier, and PAN-OS 9.0.2 and earlier.

🎯 Affected products1

PAN-OS

✅ Remediation

PAN-OS 7.1.24 and later, PAN-OS 8.0.19 and later, PAN-OS 8.1.8-h5 and later, and PAN-OS 9.0.2-h4 and later. Workarounds and mitigations: Please see the detailed FAQ here: https://live.paloaltonetworks.com/t5/Customer-Advisories/Palo-Alto-Networks-Security-Advisory-PAN-SA-2019-0019/ta-p/276661.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/CVE-2019-1575