Skip to content
CVE PROGRAM SOURCE RECORD4.9 Medium

CVE-2023-6791

PAN-OS: Plaintext Disclosure of External System Integration Credentials

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to obtain the plaintext credentials of stored external system integrations such as LDAP, SCP, RADIUS, TACACS+, and SNMP from the web interface.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks PAN-OS

Default version status: unaffected

  • 8.1 to < 8.1.24-h1affected
  • 9.0 to < 9.0.17affected
  • 9.1 to < 9.1.16affected
  • 10.0 to < 10.0.12affected
  • 10.1 to < 10.1.9affected
  • 10.2 to < 10.2.4affected
  • 11.0 to < 11.0.1affected
  • 11.1 to < Allunaffected

Palo Alto Networks Prisma Access

Default version status: unaffected

  • Allunaffected

Palo Alto Networks Cloud NGFW

Default version status: unaffected

  • Allunaffected

References