Upgrade Palo Alto Firewall and GlobalProtect for November 2024 CVE
On 18 November 2024, Palo Alto Networks issued two security advisories, CVE-2024-0012 PAN-OS: Authentication Bypass in the Management Web Interface (PAN-SA-2024-0015) and CVE-2024-9474 PAN-OS: Privilege Escalation (PE) Vulnerability in the Web Management Interface.
Rackspace Technology and Palo Alto Networks have proactively reviewed our customers and verified the risk is low due to compensating controls protecting our customer firewall web management interfaces.
Palo Alto Networks has released interim updates as their preferred release to address these vulnerabilities. Rackspace will be contacting customers via ticket to mitigate these vulnerabilities. Please open a ticket for a Rackspace support team to assist if you have any questions.
An additional Global Protect vulnerability, CVE-2024-9473, was announced for GlobalProtect App: Local Privilege Escalation (PE) Vulnerability. Global Protect can be upgraded by our support staff to version 6.1.4-c720.
For more information see:
https://security.paloaltonetworks.com/CVE-2024-0012
Explore Related Articles
Design a Connected Healthcare Cloud for Epic, Data and AI
Explore how a connected healthcare cloud can help you bring Epic, data, analytics and AI together while keeping the environment
Read article
Right Workload, Right Place for Regulated Industries
Strategic workload placement helps regulated organizations maintain control, demonstrate resilience and govern AI in production.
Read article
Governing AI Agents Starts With the Infrastructure Beneath Them
Explore the identity, access, policy and operational controls that help organizations deploy AI agents safely across critical infrastructure.
Read article
The Cyberattacks That Never Cross Your Firewall
Discover how Rackspace Managed Digital Risk Monitoring helps identify threats beyond your network, using human-led intelligence to assess risks and
Read article