Improper Authentication in Palo Alto PAN-OS - CVE-2019-17437

Vulnerability identifier: #VU23404

CSH Severity: Low

CVSS v4: 8.5 [CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]

CVE-ID: CVE-2019-17437

CWE-ID: CWE-287

Exploitation vector: Local access

Exploit availability: No public exploit available

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to an error in authentication process. A local non-privileged user can gain elevated privileges on the device.

Palo Alto PAN-OS
SUSE OpenStack Cloud Crowbar
SUSE OpenStack Cloud
SUSE Linux Enterprise Server for SAP
SUSE Linux Enterprise Server
iscsiuio
iscsiuio-debuginfo
libopeniscsiusr0_2_0
libopeniscsiusr0_2_0-debuginfo
open-iscsi
open-iscsi-debuginfo
open-iscsi-debugsource

Install updates from vendor's website.

Palo Alto PAN-OS - addressed in versions 7.1.25, 8.0.20, 8.1.11, 9.0.5
iscsiuio - update to 0.7.8.2-12.27.2
iscsiuio-debuginfo - update to 0.7.8.2-12.27.2
libopeniscsiusr0_2_0 - update to 2.0.876-12.27.2
libopeniscsiusr0_2_0-debuginfo - update to 2.0.876-12.27.2
open-iscsi - update to 2.0.876-12.27.2
open-iscsi-debuginfo - update to 2.0.876-12.27.2
open-iscsi-debugsource - update to 2.0.876-12.27.2

• https://securityadvisories.paloaltonetworks.com/Home/Detail/201

• Multiple vulnerabilities in Palo Alto Networks PAN-OS
• SUSE update for open-iscsi