Palo Alto Networks PAN-OS 10.2.x < 10.2.4 / 11.0.x < 11.0.1 Authenticated Information Disclosure

The version of Palo Alto Networks PAN-OS running on the remote host is 10.2.x prior to 10.2.4 or 11.0.x prior to 11.0.1. It is, therefore, affected by a vulnerability: - A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to...

CVE-2023-38046 PAN-OS: Read System Files and Resources During Configuration Commit

A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically created configuration to read local files and resources from the system...

CVE-2023-38046

CVE-2023-38046 affects Palo Alto Networks PAN-OS: an authenticated administrator with commit privileges can read local files and resources from the system during a specifically crafted configuration commit. The ENISA/EUVD and Palo Alto advisories describe the root cause as an externally controlle...