CVE-2023-0008CWE-73

PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface

Medium · published May 10, 2023

CVSS v3.1
4.4
EPSS
1%
Percentile
44.7
In the wild
Unconfirmed
What it is

A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from the firewall through a race condition.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00542 · 44.7th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2023-05-10T16:34Z
EPSS history
Timeline
  • 10 MAY 16:34Z
    PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface
    cvelistv5