NetSight
medium4.9

CVE-2023-6791

A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to obtain the plaintext credential…

Impact

A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to obtain the plaintext credentials of stored external system integrations such as LDAP, SCP, RADIUS, TACACS+, and SNMP from the web interface.

Affected products

VendorProductAffected versions
PaloaltonetworksPan-Os
from 8.1.0 before 8.1.24
from 9.0.0 before 9.0.17
from 9.1.0 before 9.1.16
from 10.0.0 before 10.0.12
from 10.1.0 before 10.1.9
from 10.2.0 before 10.2.4

Weakness classification

References