What is PAN-SA-2020-0006?

PAN-SA-2020-0006 is a security advisory published by Palo Alto Networks Security Advisories with High severity. PAN-SA-2020-0006 PAN-OS: Nginx software upgraded to resolve multiple vulnerabilities

Why does PAN-SA-2020-0006 have no CVE ID yet?

Palo Alto Networks Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by PAN-SA-2020-0006?

PAN-SA-2020-0006 affects 1 product, including: PAN-OS.

PAN-SA-2020-0006HighDisclosed before NVD

PAN-SA-2020-0006 PAN-OS: Nginx software upgraded to resolve multiple vulnerabilities

Vendor

Palo Alto Networks Security Advisories

Published

May 13, 2020

Last Modified

May 13, 2020

📋 Description

Nginx software included with PAN-OS has been upgraded to resolve multiple vulnerabilities.

This issue affects: All PAN-OS 7.1 and 8.0 versions; PAN-OS 8.1 versions earlier than 8.1.14; PAN-OS 9.0 versions earlier than 9.0.7.

The resolved vulnerabilities include:

🎯 Affected products1

PAN-OS

✅ Remediation

These issues are fixed in PAN-OS 8.1.14, PAN-OS 9.0.7, and all later PAN-OS versions. PAN-OS 8.0 is now end-of-life as of October 31, 2019, and is no longer covered by our Product Security Assurance policies. PAN-OS 7.1 is on extended support until June 30, 2020, and is only being considered for critical security vulnerability fixes. Workarounds and mitigations: Issues that affect the management interface of PAN-OS are strongly mitigated by following best practices for securing the PAN-OS management interface. Please review the Best Practices for Securing Administrative Access in the PAN-OS technical documentation, available at: https://docs.paloaltonetworks.com.

🔗 References (1)

advisoryhttps://security.paloaltonetworks.com/PAN-SA-2020-0006