PAN-SA-2016-0018 WildFire Cross-Site Scripting Vulnerability
Attack Vector NETWORK
Scope UNCHANGED
Attack Complexity LOW
Confidentiality Impact LOW
Privileges Required NONE
Integrity Impact LOW
User Interaction REQUIRED
Availability Impact LOW
Description
A Palo Alto Networks firewall displaying a WildFire cloud integrated report is susceptible to a cross-site scripting condition (Ref # WTC-3355).
A sample analyzed by the WildFire cloud could trigger a cross-site scripting attack against a firewall administrator who is displaying a WildFire report. This vulnerability is restricted to the context in which the report is parsed by the cloud.
This issue affects Palo Alto Networks hosted WildFire cloud from January to August 9th 2016
Product Status
| Versions | Affected | Unaffected |
|---|---|---|
| WildFire Cloud | None | current |
Severity:MEDIUM
CVSSv3.1 Base Score:6.3 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)
Weakness Type
Solution
Palo Alto Networks hosted WildFire cloud starting August 10th 2016. Users do not need to take action.
Workarounds and Mitigations
N/A
Acknowledgments
Alexander Fischer, DCSO Deutsche Cyber-Sicherheitsorganisation