Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-5000 Series, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-7000 Series firewalls are not cleared before the data frame is created. This leaks a small amount of random information from the firewall memory into the Ethernet packets. An attacker on the same Ethernet subnet as the PAN-OS firewall is able to collect potentially sensitive information from these packets.
Data leak at Palo Alto Networks
DOWNLOAD: https://miimms.com/2vKGFx
Dave Bittner: [00:00:38:14] We'd like to take a moment to thank our sponsor, Palo Alto Networks. You can find them at go.paloaltonetworks.com/secureclouds. The use of software-as-a-service applications takes data security beyond traditional network perimeters. SaaS environments can create gaps in security visibility, and pose new risks for threat propagation, data leakage, and regulatory non-compliance. With Palo Alto Networks integrated platform, you get detailed software-as-a-service visibility and granular control, data governance, automatic risk remediation, and malware prevention, so your organization can achieve complete SaaS protection.
Dave Bittner: [00:01:17:09] With Palo Alto Networks, you get the broadest, most comprehensive cybersecurity, for all cloud and SaaS environments. Make sure your apps and data stay secure and protected. Remember, secure clouds are happy clouds. Find out how to secure yours, at go.paloaltonetworks.com/secureclouds. We thank Palo Alto Networks for sponsoring our show.
At Palo Alto Networks, we're committed to bringing together the very best people in service of our mission, so we're also proud to be the cybersecurity workplace of choice, recognized among Newsweek's Most Loved Workplaces (2022), Comparably Best Companies for Diversity (2021) and HRC Best Places for LGBTQ Equality (2022). For more information, visit www.paloaltonetworks.com.
We are committed to providing reasonable accommodations for all qualified individuals with a disability. If you require assistance or accommodation due to a disability or special need, please contact us at accommodations@paloaltonetworks.com.
2ff7e9595c
Comments