CVE-2019-1575

Published: Jul 16, 2019Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Information disclosure in PAN-OS 7.1.23 and earlier, PAN-OS 8.0.18 and earlier, PAN-OS 8.1.8-h4 and earlier, and PAN-OS 9.0.2 and earlier may allow for an authenticated user with read-only privileges to extract the API key of the device and/or the username/password from the XML API (in PAN-OS) and possibly escalate privileges granted to them.

Affected (6)

Products: Paloaltonetworks: Pan Os

Paloaltonetworks

1 product

Pan Os

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	Before 7.1.24
Paloaltonetworks Pan Os	From 8.0.0 to 8.0.19
Paloaltonetworks Pan Os	From 8.1.0 to 8.1.8
Paloaltonetworks Pan Os	From 9.0.0 to 9.0.2
Paloaltonetworks Pan Os	Version 8.1.8
Paloaltonetworks Pan Os	Version 8.1.8 h4