Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2023-0008

PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from the firewall through a race condition.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks PAN-OS

Default version status: unaffected

  • 8.1 to < 8.1.25affected
  • 9.0 to < 9.0.17affected
  • 9.1 to < 9.1.16affected
  • 10.0 to < 10.0.12affected
  • 10.1 to < 10.1.10affected
  • 10.2 to < 10.2.4affected
  • 11.0 to < 11.0.1affected

Palo Alto Networks Prisma Access

Default version status: unaffected

  • Allunaffected

Palo Alto Networks Cloud NGFW

Default version status: unaffected

  • Allunaffected

References