What is PAN-SA-2015-0005?

PAN-SA-2015-0005 is a security advisory published by Palo Alto Networks Security Advisories with Critical severity. PAN-SA-2015-0005 Device management authentication bypass

Why does PAN-SA-2015-0005 have no CVE ID yet?

Palo Alto Networks Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by PAN-SA-2015-0005?

PAN-SA-2015-0005 affects 1 product, including: PAN-OS.

PAN-SA-2015-0005CriticalDisclosed before NVD

PAN-SA-2015-0005 Device management authentication bypass

Vendor

Palo Alto Networks Security Advisories

Published

July 24, 2015

Last Modified

July 24, 2015

📋 Description

Devices running PAN-OS 7.0.0 (including Panorama) that are configured to use LDAP for captive portal or device management authentication do not properly perform authentication against the LDAP server in specific cases, leading to an authentication bypass. There is no issue if you are using Radius or local authentication instead of LDAP or prior versions of PAN-OS; nor does this affect authentication attempts from GlobalProtect clients. This vulnerability can lead to authentication bypass for captive portal or device management login attempts. This issue only affects PAN-OS 7.0.0

🎯 Affected products1

PAN-OS

✅ Remediation

PAN-OS 7.0.1 and subsequent. Workarounds and mitigations: This issue only affects devices and Panorama configured to use LDAP for captive portal or device management authentication. This issue is strongly mitigated by following security appliance management best practices, requiring that network access to the management interfaces be isolated and strictly limited only to security administration personnel.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/PAN-SA-2015-0005