Description
A vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to expose the plaintext values of secrets stored in the device configuration and encrypted API keys.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | PAN-OS | 10.2 – < 10.2.3, 10.1 – < 10.1.8, 10.0 – < 10.0.12, 9.1 – < 9.1.15, 9.0 – < 9.0.17, 8.1 – < 8.1.24 | 11.0 |
| Palo Alto Networks | Prisma Access | — | All |
| Palo Alto Networks | Cloud NGFW | — | All |
Advisories 2
- ICSA-24-102-03 Siemens RUGGEDCOM APE1808 CISA ICS & IT advisories · Dec 10, 2024
- SSA-822518 SSA-822518: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW Before V11.0.1 on RUGGEDCOM APE1808 Devices Siemens ProductCERT · Dec 10, 2024