Palo Alto Networks PAN-OS CVE-2018-9242 Local Privilege Escalation Vulnerability

Bugtraq ID:	104676
Class:	Design Error
CVE:	CVE-2018-9242
Remote:	No
Local:	Yes
Published:	Jun 28 2018 12:00AM
Updated:	Jun 28 2018 12:00AM
Credit:	Xinming Nie with Aisinfo-Secfor
Vulnerable:	Paloaltonetworks PAN-OS 6.1.1 0 Paloaltonetworks PAN-OS 6.1.0 0 Paloaltonetworks PAN-OS 6.0.7 0 Paloaltonetworks PAN-OS 8.0.9 Paloaltonetworks PAN-OS 8.0.2 Paloaltonetworks PAN-OS 7.1.16 Paloaltonetworks PAN-OS 7.1.12 Paloaltonetworks PAN-OS 7.1.11 Paloaltonetworks PAN-OS 7.1.1 Paloaltonetworks PAN-OS 7.1 Paloaltonetworks PAN-OS 6.1.18 Paloaltonetworks PAN-OS 6.1.16 Paloaltonetworks PAN-OS 6.1.15 Paloaltonetworks PAN-OS 6.1.14 Paloaltonetworks PAN-OS 6.1.12 Paloaltonetworks PAN-OS 6.1.11 Paloaltonetworks PAN-OS 6.1.10 Paloaltonetworks PAN-OS 6.0.15 Paloaltonetworks PAN-OS 6.0.14 Paloaltonetworks PAN-OS 6.0.13 Paloaltonetworks PAN-OS 6.0.12 Paloaltonetworks PAN-OS 6.0.9 Paloaltonetworks PAN-OS 6.0.6 Paloaltonetworks PAN-OS 6.0.5 Paloaltonetworks PAN-OS 5.1.13 Paloaltonetworks PAN-OS 5.1.12 Paloaltonetworks PAN-OS 5.1.11 Paloaltonetworks PAN-OS 5.1.10 Paloaltonetworks PAN-OS 5.1.9 Paloaltonetworks PAN-OS 5.1.3 Paloaltonetworks PAN-OS 5.1.2 Paloaltonetworks PAN-OS 5.1.1 Paloaltonetworks PAN-OS 5.1 Paloaltonetworks PAN-OS 5.0.20 Paloaltonetworks PAN-OS 5.0.19 Paloaltonetworks PAN-OS 5.0.18 Paloaltonetworks PAN-OS 5.0.17 Paloaltonetworks PAN-OS 5.0.15 Paloaltonetworks PAN-OS 5.0.14 Paloaltonetworks PAN-OS 5.0.10 Paloaltonetworks PAN-OS 5.0.9 Paloaltonetworks PAN-OS 5.0.8 Paloaltonetworks PAN-OS 5.0.7 Paloaltonetworks PAN-OS 5.0.6 Paloaltonetworks PAN-OS 5.0.5 Paloaltonetworks PAN-OS 5.0.4 Paloaltonetworks PAN-OS 5.0.3 Paloaltonetworks PAN-OS 4.1.16 Paloaltonetworks PAN-OS 4.1.15 Paloaltonetworks PAN-OS 4.1.14 Paloaltonetworks PAN-OS 4.1.13 Paloaltonetworks PAN-OS 4.1.12 Paloaltonetworks PAN-OS 4.1.4 Paloaltonetworks PAN-OS 4.1.3 Paloaltonetworks PAN-OS 4.1.2 Paloaltonetworks PAN-OS 4.1.1 Paloaltonetworks PAN-OS 4.1 Paloaltonetworks PAN-OS 4.0.10 Paloaltonetworks PAN-OS 4.0.9 Paloaltonetworks PAN-OS 4.0.8 Paloaltonetworks PAN-OS 4.0.7 Paloaltonetworks PAN-OS 4.0.6 Paloaltonetworks PAN-OS 4.0.5 Paloaltonetworks PAN-OS 4.0.4 Paloaltonetworks PAN-OS 4.0.3 Paloaltonetworks PAN-OS 3.1.12 Paloaltonetworks PAN-OS 3.1.11 Paloaltonetworks PAN-OS 3.1.10 Paloaltonetworks PAN-OS 3.1.9 Paloaltonetworks PAN-OS 8.0.7 Paloaltonetworks PAN-OS 8.0.6 Paloaltonetworks PAN-OS 8.0.5 Paloaltonetworks PAN-OS 8.0.4 Paloaltonetworks PAN-OS 8.0.3 Paloaltonetworks PAN-OS 7.1.14 Paloaltonetworks PAN-OS 7.1.13 Paloaltonetworks PAN-OS 7.1.10 Paloaltonetworks PAN-OS 6.1.20 Paloaltonetworks PAN-OS 6.1.2 Paloaltonetworks PAN-OS 6.1.19 Paloaltonetworks PAN-OS 6.1.17 Paloaltonetworks PAN-OS 6.1.13 Paloaltonetworks PAN-OS 6.1 Paloaltonetworks PAN-OS 6.0 Paloaltonetworks PAN-OS 5.1.5 Paloaltonetworks PAN-OS 5.1.4 Paloaltonetworks PAN-OS 5.0.2 Paloaltonetworks PAN-OS 5.0.16 Paloaltonetworks PAN-OS 5.0.1 Paloaltonetworks PAN-OS 5.0 Paloaltonetworks PAN-OS 4.1.11 Paloaltonetworks PAN-OS 4.1 Paloaltonetworks PAN-OS 4.0.14 Paloaltonetworks PAN-OS 4.0 Paloaltonetworks PAN-OS 3.1
Not Vulnerable:	Paloaltonetworks PAN-OS 8.0.10 Paloaltonetworks PAN-OS 7.1.17 Paloaltonetworks PAN-OS 6.1.21

Palo Alto Networks PAN-OS CVE-2018-9242 Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Palo Alto Networks PAN-OS CVE-2018-9242 Local Privilege Escalation Vulnerability

References:

• Vendor Homepage (Palo Alto Networks)
  
• Local Privilege Escalation in Management Web Interface (PAN-SA-2018-0004) (paloaltonetworks)