CVE-2024-5916 PAN-OS: Cleartext Exposure of External System Secrets

2024-08-1416:41:15

CWE-313

palo_alto

github.com

palo alto networks

pan-os

information exposure

external systems

secrets disclosure

passwords disclosure

tokens disclosure

CVSS4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

PASSIVE

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/SC:H/VI:N/SI:N/VA:N/SA:N/AU:N/U:Amber/R:U/V:C/RE:H

AI Score

6.3

Confidence

Low

EPSS

Percentile

9.5%

SSVC

Exploitation

none

Automatable

Technical Impact

partial

JSON

An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to unintentionally disclose secrets, passwords, and tokens of external systems. A read-only administrator who has access to the config log, can read secrets, passwords, and tokens to external systems.

CNA Affected

[
  {
    "vendor": "Palo Alto Networks",
    "product": "PAN-OS",
    "versions": [
      {
        "status": "unaffected",
        "version": "9.1"
      },
      {
        "status": "unaffected",
        "version": "10.1"
      },
      {
        "status": "affected",
        "changes": [
          {
            "at": "10.2.8",
            "status": "unaffected"
          }
        ],
        "version": "10.2",
        "lessThan": "10.2.8",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "changes": [
          {
            "at": "11.0.4",
            "status": "unaffected"
          }
        ],
        "version": "11.0",
        "lessThan": "11.0.4",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "11.1",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Palo Alto Networks",
    "product": "Cloud NGFW",
    "versions": [
      {
        "status": "affected",
        "version": "Before 8/15"
      },
      {
        "status": "unaffected",
        "version": "On or after 8/15"
      },
      {
        "status": "affected",
        "version": "Before 8/23"
      },
      {
        "status": "unaffected",
        "version": "On or after 8/23"
      }
    ],
    "platforms": [
      "AWS",
      "Azure"
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Palo Alto Networks",
    "product": "Prisma Access",
    "versions": [
      {
        "status": "unaffected",
        "version": "All"
      }
    ],
    "defaultStatus": "unaffected"
  }
]