CVE-2024-0012 Scanner.
PAN-OS Management Web Interface - Authentication Bypass
Free and read-only. Scan only sites you own or are allowed to test.
What This Check Does.
Read-only
It only asks your site for public pages, the way a browser would. Nothing is changed, uploaded or stored.
Up to 1 request
A small, fixed number of requests, so the check is quick and will not load your site.
Looks for CVE-2024-0012
It looks for the specific sign of this one vulnerability and ends with a clear answer: vulnerable, not vulnerable, or could not be determined.
About CVE-2024-0012. What It Means.
An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities
FAQ
Common Questions.
PAN-OS Management Web Interface - Authentication Bypass. An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities
Atlas sends up to 1 read-only request to your site and looks for the specific sign of CVE-2024-0012 in Palo Alto PAN-OS. Nothing is changed, uploaded or stored on your site.
Yes. CVE-2024-0012 is on the CISA Known Exploited Vulnerabilities list, which means attackers have used it against real targets.
Yes. The check only reads public pages, the same way a browser or a search engine would. Scan only sites you own or are allowed to test.
It means no sign of CVE-2024-0012 was found by this read-only check. It does not prove the site is free of other weaknesses.
Update Palo Alto PAN-OS to the latest version from the vendor, or follow the vendor's advice to switch off the affected feature. The vendor links and details are in the CVE-2024-0012 briefing linked on this page.
Scan only sites you own or have written permission to test. A result of Not Vulnerable means this read-only check found no sign of CVE-2024-0012; it is not a guarantee that the site is secure.