Organisaatioissa laajasti k\u00e4ytetyn Palo Alto GlobalProtect-tuotteen haavoittuvuutta (CVE-2024-3400) k\u00e4ytet\u00e4\u00e4n aktiivisesti hyv\u00e4ksi. Haavoittuvuudella on merkitt\u00e4vi\u00e4 vaikutuksia ja se vaatii laitteiden p\u00e4ivityst\u00e4 ja tutkintaa. Haavoittuvuudelle alttiita laitteita on syyt\u00e4 ep\u00e4ill\u00e4 murretuiksi.<\/p>\n\n\n\n
https:\/\/www.kyberturvallisuuskeskus.fi\/fi\/tietomurtoja-palo-alto-globalprotect-tuotteisiin-vaatii-valittomia-toimia<\/a><\/p>\n\n\n\n Kyberturvallisuuskeskus on raportoinut kriittisest\u00e4 haavoittuvuudesta Palo Alto Networksin GlobalProtect-tuotteessa, joka koskee PAN-OS-j\u00e4rjestelm\u00e4\u00e4. Haavoittuvuus mahdollistaa j\u00e4rjestelm\u00e4n t\u00e4yden haltuunoton et\u00e4n\u00e4 ilman tunnistautumista. T\u00e4m\u00e4 ongelma vaikuttaa laitteisiin, jotka k\u00e4ytt\u00e4v\u00e4t PAN-OS versioita 10.2, 11.0 tai 11.1, ja joissa GlobalProtect on k\u00e4yt\u00f6ss\u00e4. Muita tuotteita, kuten Cloud NGFW ja Prisma Access, ei ole mainittu haavoittuviksi.<\/p>\n\n\n\n Koska haavoittuvuus on luokiteltu eritt\u00e4in kriittiseksi (CVSS 10), ja sen hyv\u00e4ksik\u00e4ytt\u00f6\u00e4 on havaittu aktiivisesti, organisaatioita kehotetaan asentamaan korjaavat p\u00e4ivitykset mahdollisimman pian. Aiemmin ehdotettu laitetelemetrian poistaminen k\u00e4yt\u00f6st\u00e4 ei ole en\u00e4\u00e4 riitt\u00e4v\u00e4 suojauskeino, erityisesti kun hyv\u00e4ksik\u00e4ytt\u00f6esimerkkikoodi on julkaistu. Palo Alto on jo julkaissut ensimm\u00e4iset korjaavat p\u00e4ivitykset ja suosittelee niiden asentamista v\u00e4litt\u00f6m\u00e4sti\u200b (Kyberturvallisuuskeskus<\/a>)\u200b\u200b (Kyberturvallisuuskeskus<\/a>)\u200b\u200b (Kyberturvallisuuskeskus<\/a>)\u200b.<\/p>\n\n\n\n Lis\u00e4tietoja ja ohjeita p\u00e4ivitysten asentamiseen l\u00f6yd\u00e4t Kyberturvallisuuskeskuksen sivustolta ja Palo Alton virallisilta tukisivuilta.<\/p>","protected":false},"excerpt":{"rendered":" Organisaatioissa laajasti k\u00e4ytetyn Palo Alto GlobalProtect-tuotteen haavoittuvuutta (CVE-2024-3400) k\u00e4ytet\u00e4\u00e4n aktiivisesti hyv\u00e4ksi. Haavoittuvuudella on merkitt\u00e4vi\u00e4 vaikutuksia ja se vaatii laitteiden p\u00e4ivityst\u00e4 […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[21,9],"tags":[22,15],"class_list":["post-1148","post","type-post","status-publish","format-standard","hentry","category-data-protection","category-security","tag-data-protection","tag-tietoturva"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/posts\/1148","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/comments?post=1148"}],"version-history":[{"count":0,"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/posts\/1148\/revisions"}],"wp:attachment":[{"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/media?parent=1148"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/categories?post=1148"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techlance.ddns.net\/en\/wp-json\/wp\/v2\/tags?post=1148"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}