https://ripjyr.hatenablog.jp/entry/2025/08/17/231412

セキュリティ

PaloAlto

【セキュリティニュース】Palo Alto、セキュリティアドバイザリ6件を公開（1ページ目 / 全1ページ）：Security NEXT

PAN-SA-2025-0014 Chromium: Monthly Vulnerability Update (August 2025)

Severity: MEDIUM, Suggested Urgency: MODERATE

CVSS-BT: 6.1 / CVSS-B: 8.6

CVE-2025-2180 Checkov by Prisma Cloud: Unsafe Deserialization of Terraform Files Allows Code Execution

Severity: LOW, Suggested Urgency: MODERATE

CVSS3 1.1

CVE-2025-2181 Checkov by Prisma Cloud: Cleartext Exposure of Credentials

Severity: LOW, Suggested Urgency: MODERATE

Attacker finds a Prisma Cloud access key in a Checkov output file that a user uploaded to an insecure location.

CVSS3 2.0

Attacker gains access to a system and then finds a Checkov output file that contains an exposed Prisma Cloud access key.

CVSS3 1.7

CVE-2025-2183 GlobalProtect App: Improper Certificate Validation Leads to Privilege Escalation

Severity: MEDIUM, Suggested Urgency: MODERATE

CVSS3 4.5

CVE-2025-2182 PAN-OS: Firewall Clusters using the MACsec Protocol Expose the Connectivity Association Key (CAK)

Severity: LOW, Suggested Urgency: MODERATE

CVSS3 3.3

CVE-2025-2184 Cortex XDR Broker VM: Secrets Shared Across Multiple Broker VM Images

Severity: MEDIUM, Suggested Urgency: MODERATE

CVSS3 4.9

F5

Quarterly Security Notification (August 2025)

K000141436: BIG-IP Client SSL profile vulnerability CVE-2025-52585

CVSS3: 7.5

K000151546: BIG-IP APM vulnerability CVE-2025-46405

CVSS 3: 7.5

K000152049: F5 Access for Android vulnerability CVE-2025-54809

CVSS 3: 7.4

K000151782: BIG-IP APM VPN browser client for macOS vulnerability CVE-2025-48500

CVSS 3: 7.3

About the security content of iOS 18.6 and iPadOS 18.6 - Apple Support

Cisco

【セキュリティニュース】「Cisco FMC」に深刻な脆弱性 - 認証なしでコマンド実行のおそれ（1ページ目 / 全1ページ）：Security NEXT

【セキュリティニュース】Cisco、ファイアウォール製品群にアドバイザリ21件を公開（1ページ目 / 全1ページ）：Security NEXT

[High]Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Web Services Denial of Service Vulnerability : Cisco Security Advisory

[Medium]Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Access Control Rules Bypass Vulnerability : Cisco Security Advisory

[High]Cisco IOS, IOS XE, Secure Firewall Adaptive Security Appliance, and Secure Firewall Threat Defense Software IKEv2 Denial of Service Vulnerabilities : Cisco Security Advisory

[Medium]Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Authenticated Command Injection Vulnerabilities : Cisco Security Advisory

[Medium]Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software DHCP Denial of Service Vulnerability : Cisco Security Advisory

[High]Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software VPN Web Server Denial of Service Vulnerability : Cisco Security Advisory

[High]Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Network Address Translation DNS Inspection Denial of Service Vulnerability : Cisco Security Advisory

[High]Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL/TLS Certificate Denial of Service Vulnerability : Cisco Security Advisory

[High]Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access SSL VPN Denial of Service Vulnerabilities : Cisco Security Advisory

[High]Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service Vulnerability : Cisco Security Advisory

[Medium]Cisco Secure Firewall Management Center Software Authorization Bypass Vulnerabilities : Cisco Security Advisory

[Medium]Cisco Secure Firewall Management Center Software Command Injection Vulnerability : Cisco Security Advisory

[Medium]Cisco Secure Firewall Management Center and Secure Firewall Threat Defense Software Command Injection Vulnerability : Cisco Security Advisory

[High]Cisco Secure Firewall Management Center Software HTML Injection Vulnerability : Cisco Security Advisory

[Critical]Cisco Secure Firewall Management Center Software RADIUS Remote Code Execution Vulnerability : Cisco Security Advisory

[Medium]Cisco Secure Firewall Management Center Software XPATH Injection Vulnerability : Cisco Security Advisory

[Medium]Cisco Secure Firewall Management Center Software Cross-Site Scripting Vulnerability : Cisco Security Advisory

[High]Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software for Firepower 2100 Series IPv6 over IPsec Denial of Service Vulnerability : Cisco Security Advisory

[High]Cisco Secure Firewall Threat Defense Software Snort 3 Denial of Service Vulnerability : Cisco Security Advisory

興味を持った記事(2025年08月17日)

セキュリティ

PaloAlto

F5

Cisco

宇宙

鉄

IT

その他