CVE-2023-0004Medium

CVE-2023-0004 PAN-OS: Local File Deletion Vulnerability

Published
April 12, 2023
Last Modified
April 19, 2023

🔗 CVE IDs covered (1)

CVE-2023-0004 →

📋 Description

A local file deletion vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to delete files from the local file system with elevated privileges. These files can include logs and system components that impact the integrity and availability of PAN-OS software.

🎯 Affected products3

  • PAN-OS
  • Prisma Access
  • Cloud NGFW

✅ Remediation

This issue is fixed in PAN-OS 8.1.24, PAN-OS 9.0.17, PAN-OS 9.1.15, PAN-OS 10.0.11, PAN-OS 10.1.6, and all later PAN-OS versions. Workarounds and mitigations: Customers with a Threat Prevention subscription can block attacks for this vulnerability by enabling Threat IDs 93274 and 93287 (Applications and Threats content update 8698). This issue requires the attacker to have authenticated access to the PAN-OS management interface. You can mitigate the impact of this issue by following best practices for securing the PAN-OS management interface. Please review the Best Practices for Securing Administrative Access in the PAN-OS technical documentation at https://docs.paloaltonetworks.com/best-practices.

🔗 References (1)