{"id":"CVE-2023-0004","state":"PUBLISHED","title":"PAN-OS: Local File Deletion Vulnerability","description":"A local file deletion vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to delete files from the local file system with elevated privileges.\n\nThese files can include logs and system components that impact the integrity and availability of PAN-OS software.","publishedAt":"2023-04-12T16:41:02.556Z","updatedAt":"2025-02-13T16:38:41.195Z","severity":{"score":6.5,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","source":"palo_alto"},"assigner":"palo_alto","products":["Palo Alto Networks PAN-OS","Palo Alto Networks Prisma Access","Palo Alto Networks Cloud NGFW"],"affected":[{"vendor":"Palo Alto Networks","product":"PAN-OS","defaultStatus":"unaffected","versions":[{"version":"8.1","status":"affected","lessThan":"8.1.24","changes":[{"at":"8.1.24","status":"unaffected"}],"versionType":"custom"},{"version":"9.0","status":"affected","lessThan":"9.0.17","changes":[{"at":"9.0.17","status":"unaffected"}],"versionType":"custom"},{"version":"9.1","status":"affected","lessThan":"9.1.15","changes":[{"at":"9.1.15","status":"unaffected"}],"versionType":"custom"},{"version":"10.0","status":"affected","lessThan":"10.0.11","changes":[{"at":"10.0.11","status":"unaffected"}],"versionType":"custom"},{"version":"10.1","status":"affected","lessThan":"10.1.6","changes":[{"at":"10.1.6","status":"unaffected"}],"versionType":"custom"},{"version":"10.2","status":"unaffected"},{"version":"11.0","status":"unaffected"}]},{"vendor":"Palo Alto Networks","product":"Prisma Access","defaultStatus":"unaffected","versions":[{"version":"All","status":"unaffected"}]},{"vendor":"Palo Alto Networks","product":"Cloud NGFW","defaultStatus":"unaffected","versions":[{"version":"All","status":"unaffected"}]}],"references":["https://security.paloaltonetworks.com/CVE-2023-0004","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/"],"weaknesses":["CWE-703"],"ingestedAt":"2026-10-29T20:05:36.141Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/0xxx/CVE-2023-0004.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-0004","state":"PUBLISHED","datePublished":"2023-04-12T16:41:02.556Z","dateUpdated":"2025-02-13T16:38:41.195Z","assignerShortName":"palo_alto","assignerOrgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","dateReserved":"2022-10-27T18:48:13.579Z"},"containers":{"cna":{"title":"PAN-OS: Local File Deletion Vulnerability","descriptions":[{"lang":"en","value":"A local file deletion vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to delete files from the local file system with elevated privileges.\n\nThese files can include logs and system components that impact the integrity and availability of PAN-OS software."}],"affected":[{"vendor":"Palo Alto Networks","product":"PAN-OS","defaultStatus":"unaffected","versions":[{"version":"8.1","status":"affected","lessThan":"8.1.24","changes":[{"at":"8.1.24","status":"unaffected"}],"versionType":"custom"},{"version":"9.0","status":"affected","lessThan":"9.0.17","changes":[{"at":"9.0.17","status":"unaffected"}],"versionType":"custom"},{"version":"9.1","status":"affected","lessThan":"9.1.15","changes":[{"at":"9.1.15","status":"unaffected"}],"versionType":"custom"},{"version":"10.0","status":"affected","lessThan":"10.0.11","changes":[{"at":"10.0.11","status":"unaffected"}],"versionType":"custom"},{"version":"10.1","status":"affected","lessThan":"10.1.6","changes":[{"at":"10.1.6","status":"unaffected"}],"versionType":"custom"},{"version":"10.2","status":"unaffected"},{"version":"11.0","status":"unaffected"}]},{"vendor":"Palo Alto Networks","product":"Prisma Access","defaultStatus":"unaffected","versions":[{"version":"All","status":"unaffected"}]},{"vendor":"Palo Alto Networks","product":"Cloud NGFW","defaultStatus":"unaffected","versions":[{"version":"All","status":"unaffected"}]}],"references":[{"url":"https://security.paloaltonetworks.com/CVE-2023-0004"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/"},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":6.5,"baseSeverity":"MEDIUM","confidentialityImpact":"NONE","integrityImpact":"HIGH","privilegesRequired":"HIGH","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-703","description":"CWE-703 Improper Check or Handling of Exceptional Conditions","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"palo_alto","orgId":"d6c1279f-00f6-4ef7-9217-f89ffe703ec0","dateUpdated":"2023-11-03T21:06:41.554Z"},"credits":[{"lang":"en","type":"finder","value":"Palo Alto Networks thanks Wim Barthier and Frank Lycops for discovering and reporting this issue."}],"datePublic":"2023-04-12T16:00:00.000Z","exploits":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"Palo Alto Networks is not aware of any malicious exploitation of this issue."}],"value":"Palo Alto Networks is not aware of any malicious exploitation of this issue."}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"This issue is fixed in PAN-OS 8.1.24, PAN-OS 9.0.17, PAN-OS 9.1.15, PAN-OS 10.0.11, PAN-OS 10.1.6, and all later PAN-OS versions."}],"value":"This issue is fixed in PAN-OS 8.1.24, PAN-OS 9.0.17, PAN-OS 9.1.15, PAN-OS 10.0.11, PAN-OS 10.1.6, and all later PAN-OS versions."}],"source":{"defect":["PAN-171625"],"discovery":"EXTERNAL"},"timeline":[{"lang":"en","time":"2023-04-12T16:00:00.000Z","value":"Initial publication"}],"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://security.paloaltonetworks.com/CVE-2023-0004","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/E72T67UPDRXHIDLO3OROR25YAMN4GGW5/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/X6QXN4ORIVF6XBW4WWFE7VNPVC74S45Y/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LKYHSZQFDNR7RSA7LHVLLIAQMVYCUGBG/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FNA62Q767CFAFHBCDKYNPBMZWB7TWYVU/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/3N4NJ7FR4X4FPZUGNTQAPSTVB2HB2Y4A/","tags":["x_transferred"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HT7T2R4MQKLIF4ODV4BDLPARWFPCJ5CZ/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T04:54:32.562Z"}}]}}}