Lucene search

Palo_altoCVELIST:CVE-2024-5908

HistoryJun 12, 2024 - 4:28 p.m.

CVE-2024-5908 GlobalProtect App: Encrypted Credential Exposure via Log Files

2024-06-1216:28:08

CWE-532

palo_alto

www.cve.org

globalprotect

encrypted

credentials

log files

palo alto networks

5.5 Medium

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

ACTIVE

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:L/SC:H/VI:N/SI:H/VA:N/SA:H/AU:N/U:Amber/R:U/V:D/RE:M

0.0004 Low

EPSS

Percentile

9.1%

JSON

A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these encrypted credentials are exposed to recipients of the application logs.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "GlobalProtect App",
    "vendor": "Palo Alto Networks",
    "versions": [
      {
        "changes": [
          {
            "at": "5.1.12",
            "status": "unaffected"
          }
        ],
        "lessThan": "5.1.12",
        "status": "affected",
        "version": "5.1.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "6.0.8",
            "status": "unaffected"
          }
        ],
        "lessThan": "6.0.8",
        "status": "affected",
        "version": "6.0.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "6.1.3",
            "status": "unaffected"
          }
        ],
        "lessThan": "6.1.3",
        "status": "affected",
        "version": "6.1.0",
        "versionType": "custom"
      },
      {
        "changes": [
          {
            "at": "6.2.3",
            "status": "unaffected"
          }
        ],
        "lessThan": "6.2.3",
        "status": "affected",
        "version": "6.2.0",
        "versionType": "custom"
      }
    ]
  }
]

References

security.paloaltonetworks.com/CVE-2024-5908