Description
palo-alto-panos 存在一个命令执行漏洞，攻击者可以利用 /php/utils/createRemoteAppwebSession.php/ .js.map 路径在未经授权的情况下执行任意命令，从而可能导致系统被完全控制。
palo-alto-panos /php/utils/createRemoteAppwebSession.php 命令执行漏洞（CVE-2024-0012/CVE-2024-9474）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://github.com/gobysec/GobyVuls/blob/master/Palo-alto-panos%20createRemoteAppwebSession.php%20Command%20Execution%20Vulnerability%20(CVE-2024-0012)(CVE-2024-9474).md
https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/
https://security.paloaltonetworks.com/CVE-2024-0012
https://nvd.nist.gov/vuln/detail/CVE-2024-0012
https://unit42.paloaltonetworks.com/cve-2024-0012-cve-2024-9474/
https://medium.com/@talatumsolutions/breaking-the-firewall-exploiting-pan-os-vulnerabilities-for-unauthenticated-remote-code-execution-23bf79d3f245
https://www.picussecurity.com/resource/blog/palo-alto-cve-2024-0012-and-cve-2024-9474-vulnerabilities-explained