Palo Alto PAN-OS Information Disclosure Vulnerability

Release Date: 21 Feb 2025 752 Views

RISK: Medium Risk

TYPE: Security software and application - Security Software & Appliance

A vulnerability was identified in Palo Alto PAN-OS. A remote attacker can exploit this vulnerability to trigger information disclosure on the targeted system.

Note:

CVE-2025-0111 is being exploited in the wild. Exploitation of CVE-2025-0111 will cause an authenticated file read vulnerability in the Palo Alto Networks PAN-OS software enables an authenticated attacker with network access to the management web interface to read files on the PAN-OS filesystem that are readable by the “nobody” user.

Impact

Information Disclosure

System / Technologies affected

PAN-OS 10.1 versions < 10.1.14-h9
PAN-OS 10.2 versions < 10.2.7-h24, < 10.2.8-h21, < 10.2.9-h21, < 10.2.10-h14, < 10.2.11-h12, < 10.2.12-h6, < 10.2.13-h3
PAN-OS 11.1 versions < 11.1.2-h18, < 11.1.6-h1
PAN-OS 11.2 versions < 11.2.4-h4