title: PAN-OS: Local File Deletion Vulnerability
description: A local file deletion vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to delete files from the local file system with elevated privileges.
These files can include logs and system components that impact the integrity and availability of PAN-OS software.
problem types: CWE-703 Improper Check or Handling of Exceptional Conditions
affected:
{
defaultStatus: unaffected
product: PAN-OS
vendor: Palo Alto Networks
versions:
changes: [at: 8.1.24, status: unaffected], lessThan: 8.1.24, status: affected, version: 8.1, versionType: custom
changes: [at: 9.0.17, status: unaffected], lessThan: 9.0.17, status: affected, version: 9.0, versionType: custom
changes: [at: 9.1.15, status: unaffected], lessThan: 9.1.15, status: affected, version: 9.1, versionType: custom
changes: [at: 10.0.11, status: unaffected], lessThan: 10.0.11, status: affected, version: 10.0, versionType: custom
changes: [at: 10.1.6, status: unaffected], lessThan: 10.1.6, status: affected, version: 10.1, versionType: custom
status: unaffected, version: 10.2
status: unaffected, version: 11.0
}
{
defaultStatus: unaffected
product: Prisma Access
vendor: Palo Alto Networks
versions:
status: unaffected, version: All
}
{
defaultStatus: unaffected
product: Cloud NGFW
vendor: Palo Alto Networks
versions:
status: unaffected, version: All
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
exploits: Palo Alto Networks is not aware of any malicious exploitation of this issue.
solutions: This issue is fixed in PAN-OS 8.1.24, PAN-OS 9.0.17, PAN-OS 9.1.15, PAN-OS 10.0.11, PAN-OS 10.1.6, and all later PAN-OS versions.