CVE-2017-15943 Server-side request forgery in n/a
Remote attackers can exploit SSRF in PAN-OS web interface to obtain sensitive information via external entity parsing.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-15943?
CVE-2017-15943 is a medium-severity server-side request forgery vulnerability in Paloaltonetworks Pan-Os, published on 11 Dec 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The configuration file import for applications, spyware and vulnerability objects functionality in the web interface in Palo Alto Networks PAN-OS before 6.1.19, 7.0.x before 7.0.19, and 7.1.x before 7.1.14 allows remote attackers to conduct server-side request forgery (SSRF) attacks and consequently obtain sensitive information via vectors related to parsing of external entities.
Weakness: CWE-918
Which versions are affected by CVE-2017-15943?
It affects 1 product.
Products include Paloaltonetworks Pan-Os.
How do I fix CVE-2017-15943?
No fix has been published for CVE-2017-15943 yet. Limit exposure of the affected software until one is available.
Upgrade, and send outbound requests through an allow-list that blocks internal addresses. More about Server-side request forgery.
Is CVE-2017-15943 being exploited?
There is no known exploitation of CVE-2017-15943 in the wild and no public exploit code.
Other vulnerabilities in Paloaltonetworks Pan-Os
- CVE-2024-3400 Palo Alto Networks PAN-OS Command Injection
- CVE-2020-2021 Palo Alto Networks PAN-OS Authentication Bypass
- CVE-2017-15944 Palo Alto Networks PAN-OS Remote Code Execution
- CVE-2026-0300 Palo Alto Networks PAN-OS Out-of-bounds Write
- CVE-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass
Sources
Also known as GHSA-rh48-33f7-4q29.