What is PAN-SA-2016-0026?

PAN-SA-2016-0026 is a security advisory published by Palo Alto Networks Security Advisories with None severity. PAN-SA-2016-0026 GlobalProtect Portal Version Disclosure

Why does PAN-SA-2016-0026 have no CVE ID yet?

Palo Alto Networks Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by PAN-SA-2016-0026?

PAN-SA-2016-0026 affects 1 product, including: PAN-OS.

PAN-SA-2016-0026NoneDisclosed before NVD

PAN-SA-2016-0026 GlobalProtect Portal Version Disclosure

Vendor

Palo Alto Networks Security Advisories

Published

October 4, 2016

Last Modified

October 4, 2016

📋 Description

A Palo Alto Networks firewall configured to host the GlobalProtect Portal advertises its running PAN-OS version. (Ref # PAN-60568/99786) This information disclosure does not lead to a device compromise or a disallowed access. This issue affects PAN-OS 7.0.9 and earlier; PAN-OS 7.1.4 and earlier

🎯 Affected products1

PAN-OS

✅ Remediation

PAN-OS 7.0.10 and later; PAN-OS 7.1.5 and later Workarounds and mitigations: The GlobalProtect Portal requires installation on only a single device of the entire security architecture. Customers concerned by this information disclosure can choose to disable the web interface portal in order to deflect attention away from the presence of GlobalProtect.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/PAN-SA-2016-0026