Upgrade Palo Alto Firewall and GlobalProtect for November 2024 CVE
On 18 November 2024, Palo Alto Networks issued two security advisories, CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) and CVE-2024-9474 PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface.
Rackspace Technology and Palo Alto Networks have proactively reviewed our customers and verified the risk is low due to compensating controls protecting our customer firewall web management interfaces.
Palo Alto Networks has released interim updates as their preferred release to address these vulnerabilities. Rackspace will be contacting customers via ticket to mitigate these vulnerabilities. Please open a ticket for a Rackspace support team to assist if you have any questions.
An additional Global Protect vulnerability, CVE-2024-9473, was announced for GlobalProtect App: Local Privilege Escalation (PE) Vulnerability. Global Protect can be upgraded by our support staff to version 6.1.4-c720.
For more information see:
https://security.paloaltonetworks.com/CVE-2024-0012
More from Rackspace Insights
From Data Rich to Insight Rich: A Cloud Charter for 2025
AI and data governance are evolving together, and enterprise leaders face three key priorities: proactive AI governance, privacy-first data sharing
Read article
Integrate Oracle EBS with OAM
Integrate Oracle EBS with OAM
Read article
Set up an SSH tunnel to access the Oracle WLS Administration Console
Set up an SSH tunnel to access the Oracle WLS Administration Console
Read article
Introduction to Change Data Capture (CDC)
Introduction to Change Data Capture (CDC)
Read article