Description
An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to unintentionally disclose secrets, passwords, and tokens of external systems. A read-only administrator who has access to the config log, can read secrets, passwords, and tokens to external systems.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Palo Alto Networks | PAN-OS | 10.2 – < 10.2.8, 11.0 – < 11.0.4 | 9.1 |
| Palo Alto Networks | Cloud NGFW | Before 8/15, Before 8/23 | On or after 8/15 |
| Palo Alto Networks | Prisma Access | — | All |
Advisories 3
- ICSA-24-102-04 Siemens RUGGEDCOM APE1808 CISA ICS & IT advisories · May 13, 2025
- SSA-455250 SSA-455250: Multiple Vulnerabilities in Palo Alto Networks Virtual NGFW on RUGGEDCOM APE1808 Devices Before V11.1.2-h3 Siemens ProductCERT · May 13, 2025
- WID-SEC-2024-1862 PaloAlto Networks PAN-OS: Schwachstelle ermöglicht Offenlegung von Informationen BSI CERT-Bund (WID) · Aug 14, 2024