Information Exposure Vulnerability in Palo Alto Networks PAN-OS software
CVE-2024-5916

4.4MEDIUM

Key Information:

Vendor
Palo Alto Networks
Status
Pan-os
Vendor
CVE Published:
14 August 2024

Badges

📰 News Worthy

Summary

An information exposure vulnerability exists within Palo Alto Networks PAN-OS software, allowing local system administrators to unintentionally leak sensitive information such as secrets, passwords, and tokens associated with external systems. Specifically, a read-only administrator with access to the configuration log may be able to read this confidential data, potentially compromising system security and integrity.

News Articles

🔗The Cyber Express

CERT-IN Warns About Vulnerabilities In Palo Alto Networks

CERT-IN has issued advisories regarding critical vulnerabilities in Palo Alto Networks applications. Users are urged to update to mitigate these risks.

5 months ago

References

https://security.paloaltonetworks.com/CVE-2024-5916

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • 📰

    First article discovered by The Cyber Express

  • Vulnerability published

.