What is PAN-SA-2016-0018?

PAN-SA-2016-0018 is a security advisory published by Palo Alto Networks Security Advisories with Medium severity. PAN-SA-2016-0018 WildFire Cross-Site Scripting Vulnerability

Why does PAN-SA-2016-0018 have no CVE ID yet?

Palo Alto Networks Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by PAN-SA-2016-0018?

PAN-SA-2016-0018 affects 1 product, including: WildFire Cloud.

PAN-SA-2016-0018MediumDisclosed before NVD

PAN-SA-2016-0018 WildFire Cross-Site Scripting Vulnerability

Vendor

Palo Alto Networks Security Advisories

Published

August 12, 2016

Last Modified

August 12, 2016

📋 Description

A Palo Alto Networks firewall displaying a WildFire cloud integrated report is susceptible to a cross-site scripting condition (Ref # WTC-3355). A sample analyzed by the WildFire cloud could trigger a cross-site scripting attack against a firewall administrator who is displaying a WildFire report. This vulnerability is restricted to the context in which the report is parsed by the cloud. This issue affects Palo Alto Networks hosted WildFire cloud from January to August 9th 2016

🎯 Affected products1

WildFire Cloud

✅ Remediation

Palo Alto Networks hosted WildFire cloud starting August 10th 2016. Users do not need to take action. Workarounds and mitigations: N/A

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/PAN-SA-2016-0018