• Creation
  • Validation
  • Communication & fix
  • Disclosure

CAISSE NATIONALE DE RETRAITE COMPLÉMENTAIRE DES ARTISTES-AUTEURS / Palo Alto (Global-network) instance is outdated

zythop reported 2021-11-14

The following Palo Alto (Global-network) is publicly accessible and looks out-dated : https://46.30.202.71/global-protect/login.esp

It is critical to update to a safe version as soon as possible since multiple CVEs could allow remote attackers to DoS or achieve RCE (Remote code execution) on the device.

The CVE-2021-3064 prevention reports are identified and dispatched with the help of https://twitter.com/HaboubiAnis

Reference:

IP:
46.30.202.71
Port:
443
Detected protocol:
https
Found PAN-OS web frontend
Last update: 11/2018
Version: 8.1.5
Affected by CVE-2020-2034
Affected by CVE-2020-2021
Affected by CVE-2021-3064
Found by PaloAltoPlugin 2021-11-14
IP:
46.30.202.71
Port:
443
Detected protocol:
https
Found PAN-OS web frontend
Last update: 11/2018
Version: 8.1.5
Affected by CVE-2020-2034
Affected by CVE-2020-2021
Affected by CVE-2021-3064
Found by PaloAltoPlugin 2021-11-30
IP:
46.30.202.71
Port:
443
Detected protocol:
https
Found PAN-OS web frontend
Last update: 11/2018
Version: 8.1.5
Affected by CVE-2020-2034
Affected by CVE-2020-2021
Affected by CVE-2021-3064
Found by PaloAltoPlugin 2021-12-01
Report created by zythop  2021-11-14
Report approved by BloodyShell  2021-11-14
New PDF report generated by system 2021-11-14
Report dispatched to ...@... by system 2021-11-14
Report dispatched to ...@... by system 2021-11-14
Report dispatched to ...@... by system 2021-11-14
Report comment dispatched to BloodyShell by system 2021-11-14
Report comment dispatched to iampritam by system 2021-11-14
Report comment dispatched to fokoil by system 2021-11-14
Report comment dispatched to thLambda by system 2021-11-14
Report comment dispatched to BloodyShell by system 2021-11-14
Report comment dispatched to iampritam by system 2021-11-14
Report comment dispatched to fokoil by system 2021-11-14
Report comment dispatched to thLambda by system 2021-11-14
system commented 2022-01-05: approved shows in report

bip! I'm a LeakIX probe.

This issue looks like it has been resolved!

New PDF report generated by system 2022-01-05
Report comment dispatched to zythop by system 2022-01-05
Report comment dispatched to cert-fr.cossi@ssi.gouv.fr by system 2022-01-05
Report comment dispatched to contact@ircec.fr by system 2022-01-05
Report comment dispatched to dpo@ircec.fr by system 2022-01-05
Report comment dispatched to BloodyShell by system 2022-01-05
Report comment dispatched to iampritam by system 2022-01-05
Report comment dispatched to zythop by system 2022-01-05
Report comment dispatched to fokoil by system 2022-01-05
Report comment dispatched to thLambda by system 2022-01-05
Report marked as fixed by BloodyShell  2022-01-05
Report closed by BloodyShell  2022-01-05
New PDF report generated by system 2022-01-05
Report edited by zythop  2022-01-05
New PDF report generated by system 2022-01-05
Information
Owner CAISSE NATIONALE DE RETRAITE COMPLÉMENTAIRE DES ARTISTES-AUTEURS
Created 2021-11-14 07:43
Updated 2022-01-05 18:44
Fixed true

Contacts
c...@ssi.gouv.fr
c...@ircec.fr
d...@ircec.fr

Status
Status closed
Hosting contacted false
CERT contacted false

Download report