Information Exposure Vulnerability in Palo Alto Networks PAN-OS software

CVE-2024-5916
4.4MEDIUM

Key Information

Vendor
Palo Alto Networks
Status
Pan-os
Vendor
CVE Published:
14 August 2024

Summary

An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to unintentionally disclose secrets, passwords, and tokens of external systems. A read-only administrator who has access to the config log, can read secrets, passwords, and tokens to external systems.

CVSS V3.1

Score:
4.4
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published.

Collectors

NVD Database
.