CVE-2024-0007

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS (affected versions not specified)

Description A cross-site scripting (XSS) issue in the web interface of Palo Alto Networks PAN-OS software allows a malicious authenticated read-write administrator to store a JavaScript payload, enabling the impersonation of another authenticated administrator. This can be exploited by a remote attacker to conduct cross-site scripting attacks due to inadequate protection of the web page structure.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.