Impact of Apache Text Commons Vulnerability CVE-2022-42889

Palo Alto Networks has evaluated the Apache Commons Text library vulnerability CVE-2022-42889, known as Text4Shell, for all products and services.

The Palo Alto Networks Product Security Assurance team has confirmed that all products and services are not impacted by this vulnerability.

Work around:
Customers with a Threat Prevention subscription can block known attacks for CVE-2022-42889 by enabling Threat ID 93157 (Applications and Threats content update 8632). This mitigation reduces the risk of exploitation from known exploits.