CVE-2024-5916CWE-313

PAN-OS: Cleartext Exposure of External System Secrets

Medium · published August 14, 2024

CVSS v4.0
6.0
EPSS
0%
Percentile
15.3
In the wild
Unconfirmed
What it is

An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to unintentionally disclose secrets, passwords, and tokens of external systems. A read-only administrator who has access to the config log, can read secrets, passwords, and tokens to external systems.

The record
Technical detail
CVSS v4.0
6.0 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber
EPSS
0.00249 · 15.3th percentile
Weakness
CWE-313 · Cleartext Storage in a File or on Disk
Published
2024-08-14T16:41Z
EPSS history
Timeline
  • 14 AUG 16:41Z
    PAN-OS: Cleartext Exposure of External System Secrets
    cvelistv5