PAN-OS Management Web Interface - Authentication Bypass (CVE-2024-0012)

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities

Palo Alto Networks PAN-OS软件中存在一项身份验证绕过漏洞，该漏洞允许未经身份验证的攻击者通过访问管理网页界面，获取PAN-OS管理员权限，进而执行管理操作、篡改配置或利用其他已认证的权限提升漏洞。