CVE-2016-9151

Summary

Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows local users to gain privileges via crafted values of unspecified environment variables.

Impact & exploitability

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products we track (1)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Additional information

• NVD record
• http://www.securityfocus.com/bid/94400Advisory
• http://www.securitytracker.com/id/1037381Advisory
• https://security.paloaltonetworks.com/CVE-2016-9151
• https://www.exploit-db.com/exploits/40788/Advisory
• https://www.exploit-db.com/exploits/40789/Advisory