An improper certificate validation vulnerability in the Palo Alto Networks Prisma SD-WAN ION enables man-in-the-middle (MitM) attacker to impersonate the controller.
Credits
Palo Alto Networks thanks our internal security research teams for discovering and reporting this issue.