Palo Alto Networks PAN-OS Management Web Interface身份验证绕过漏洞(CVE-2025-0108)

详细信息

漏洞类型

其他

漏洞描述

Palo Alto Networks PAN-OS软件中的身份验证绕过漏洞使得具有管理Web界面网络访问权限的未经验证攻击者能够绕过PAN-OS管理Web界面所需的身份验证，并调用某些PHP脚本。虽然调用这些PHP脚本不会导致远程代码执行，但可能会对PAN-OS的完整性和机密性产生负面影响。

修复建议

PAN-OS 10.1升级到10.1.14-h9或更高版本、PAN-OS 10.2升级到10.2.13-h3或更高版本、PAN-OS 11.1升级到11.1.6-h1或更高版本、PAN-OS 11.2升级到11.2.4-h4或更高版本。PAN-OS 11.0已于2024年11月17日终止使用(EoL)。此版本没有计划进行其他修复。参考链接： https://security.paloaltonetworks.com/CVE-2025-0108

缓解措施

通过根据Palo Alto Networks推荐的最佳实践部署指南（https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431），将管理Web界面的访问权限限制为仅受信任的内部IP地址，从而大大降低此问题的风险。

参考链接

• https://security.paloaltonetworks.com/CVE-2025-0108

  CVE · vendor-advisory

• https://www.theregister.com/2025/02/19/palo_alto_firewall_attack/

  NVD · Third Party Advisory · Press/Media Coverage

• https://slcyber.io/blog/nginx-apache-path-confusion-to-auth-bypass-in-pan-os/

  NVD · Exploit · Press/Media Coverage

• https://www.securityweek.com/palo-alto-networks-confirms-exploitation-of-firewall-vulnerability/

  NVD · Third Party Advisory · Press/Media Coverage

• https://www.bleepingcomputer.com/news/security/palo-alto-networks-tags-new-firewall-bug-as-exploited-in-attacks/

  NVD · Third Party Advisory · Press/Media Coverage

• https://www.darkreading.com/remote-workforce/patch-now-cisa-researchers-warn-palo-alto-flaw-exploited-wild

  NVD · Third Party Advisory · Press/Media Coverage

• https://github.com/iSee857/CVE-2025-0108-PoC

  NVD · Exploit · Third Party Advisory

• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2025-0108

  NVD · US Government Resource