Tag: Network Security, Vulnerabilities, Zero-day vulnerability

Palo Alto Networks zero-day firewall flaws caused by basic dev mistakes

However, watchTowr researchers found that a redirect script called uiEnvSetup.php expects the HTTP_X_PAN_AUTHCHECK value to be set to off, and if this is provided in the request, the server will