LeakIX report : airbus.com

Creation
Validation
Communication & fix
Disclosure

airbus.com / Palo Alto (Global-network) instance is outdated

Deleted user reported 2021-11-14

The following Palo Alto (Global-network) is publicly accessible and looks out-dated : https://114.255.100.26/global-protect/login.esp

It is critical to update to a safe version as soon as possible since multiple CVEs could allow remote attackers to DoS or achieve RCE (Remote code execution) on the device.

The CVE-2021-3064 prevention reports are identified and dispatched with the help of https://twitter.com/HaboubiAnis

Reference:

https://security.paloaltonetworks.com/CVE-2021-3064

IP:

114.255.100.26

Port:

443

Detected protocol:

https

Vulnerable URL:

https://114.255.100.26/global-protect/portal/images/favicon.ico

Found PAN-OS web frontend
Last update: 6/2020
Version: 8.1.15-h3
Affected by CVE-2021-3064

Found by PaloAltoPlugin 2021-11-14

IP:

114.255.100.26

Port:

443

Detected protocol:

https

Vulnerable URL:

https://114.255.100.26/global-protect/portal/images/favicon.ico

Found PAN-OS web frontend
Last update: 6/2020
Version: 8.1.15-h3
Affected by CVE-2021-3064

Found by PaloAltoPlugin 2021-11-14

IP:

114.255.100.26

Port:

443

Detected protocol:

https

Vulnerable URL:

https://114.255.100.26/global-protect/portal/images/favicon.ico

Found PAN-OS web frontend
Last update: 6/2020
Version: 8.1.15-h3
Affected by CVE-2021-3064

Found by PaloAltoPlugin 2021-11-15

Report created by

deleted-user 2021-11-14

Report approved by

BloodyShell 2021-11-14

New PDF report generated by system 2021-11-14

Report dispatched to ...@... by system 2021-11-14

Report comment dispatched to BloodyShell by system 2021-11-15

Report comment dispatched to iampritam by system 2021-11-15

Report comment dispatched to fokoil by system 2021-11-15

Report comment dispatched to thLambda by system 2021-11-15

system commented 2021-11-17: approved shows in report

bip! I'm a LeakIX probe.

This issue looks like it has been resolved!

New PDF report generated by system 2021-11-17

Report comment dispatched to zythop by system 2021-11-17

Report comment dispatched to cert@airbus.com by system 2021-11-17

Report comment dispatched to acs-csirt-de@airbus.com by system 2021-11-17

Report comment dispatched to BloodyShell by system 2021-12-05

Report comment dispatched to iampritam by system 2021-12-05

Report comment dispatched to fokoil by system 2021-12-05

Report comment dispatched to thLambda by system 2021-12-05

Report edited by

deleted-user 2022-01-06

New PDF report generated by system 2022-01-06

Information

Owner airbus.com

Created 2021-11-14 10:33

Updated 2022-01-06 15:19

Fixed false

Contacts

c...@airbus.com

a...@airbus.com

Status

Status closed

Hosting contacted false

CERT contacted false

Download report