Check CVE Id
Check CWE Id
The Palo Alto Networks Expedition Migration tool 1.0.107 and earlier may allow an unauthenticated attacker with remote access to run system level commands on the device hosting this service/application.
(Improper Access Control)
CVSS Base Score
GlobalProtect Agent 4.1.0 for Windows and GlobalProtect Agent 4.1.10 and earlier for macOS may allow an attacker to access authentication and/or session tokens and replay them to spoof the VPN session and gain access as the user.
PAN-OS 9.0.0 may allow an unauthenticated remote user to access php files.
Back to Top