Encrypted User Credentials Exposed in Application Logs

CVE-2024-5908

7.5HIGH

Key Information

Vendor
Palo Alto Networks
Status
Globalprotect App
Vendor
CVE Published:
12 June 2024

Badges

👾 Exploit Exists

Summary

A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting purposes. This means that these encrypted credentials are exposed to recipients of the application logs.

Affected Version(s)

GlobalProtect App < 5.1.12

GlobalProtect App < 6.0.8

GlobalProtect App < 6.1.3

Refferences

https://security.paloaltonetworks.com/CVE-2024-5908
vendor-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

Collectors

NVD DatabaseMitre Database

Credit

Palo Alto Networks thanks Denis Faiustov and Ruslan Sayfiev of GMO Cybersecurity by IERAE for discovering and reporting this issue.
.