The web management UI in Palo Alto Networks PAN-OS before 3.1.12 4.0.x before 4.0.10 and 4.1.x before 4.1.4 allows remote attackers to bypass authentication and obtain administrator privileges via unspecified vectors aka Ref ID 37034.