Skip to content
CVE PROGRAM SOURCE RECORD6.9 Medium

CVE-2024-8687

PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
palo_alto

Description

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstall, disable, or disconnect GlobalProtect even if the GlobalProtect app configuration would not normally permit them to do so.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Palo Alto Networks PAN-OS

Default version status: unaffected

  • 11.1.0unaffected
  • 11.2.0unaffected
  • 11.0.0 to < 11.0.1affected
  • 10.2.0 to < 10.2.4affected
  • 10.1.0 to < 10.1.9affected
  • 10.0.0 to < 10.0.12affected
  • 9.1.0 to < 9.1.16affected
  • 9.0.0 to < 9.0.17affected
  • 8.1.0 to < 8.1.25affected

Palo Alto Networks GlobalProtect App

Default version status: unaffected

  • 5.1.0 to < 5.1.12affected
  • 5.2.0 to < 5.2.13affected
  • 6.0.0 to < 6.0.7affected
  • 6.1.0 to < 6.1.2affected
  • 6.2.0 to < 6.2.1affected
  • 6.3.0unaffected

Palo Alto Networks Cloud NGFW

Default version status: unaffected

  • Allunaffected

Palo Alto Networks Prisma Access

Default version status: unaffected

  • 10.2.0 to < 10.2.9 on PAN-OSaffected

References