CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-02-12
Palo Alto Networks PAN-OS Management Web Interface Authenticated File Read Vulnerability (CVE-2025-0111) Analysis and Mitigation Guide
[Affected Scope] PAN-OS firewalls with the management web interface enabled and accessible via the network (excluding Cloud NGFW and Prisma Access)
[Impact] Authenticated attackers can read sensitive system files on the PAN-OS filesystem that are readable by the 'nobody' user, potentially exposing configuration details
[Mitigation] Apply the latest PAN-OS security patches immediately and restrict management interface access to trusted internal IP addresses