paloaltonetworks pan-os, paloaltonetworks globalprotect, paloaltonetworks prisma access
CVSS 7.1 · High EPSS 0,41%
Kerentanan Exposure of Sensitive System Information to an Unauthorized Control Sphere pada paloaltonetworks pan-os, paloaltonetworks globalprotect +1 lainnya. Skor CVSS 3.1 7.1 (High) menurut NVD.
An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstall, disable, or disconnect GlobalProtect even if the GlobalProtect app configuration would not normally permit them to do so.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| paloaltonetworks | pan-os | Versi 8.1.0 hingga sebelum 8.1.25 |
| paloaltonetworks | pan-os | Versi 9.0.0 hingga sebelum 9.0.17 |
| paloaltonetworks | pan-os | Versi 9.1.0 hingga sebelum 9.1.16 |
| paloaltonetworks | pan-os | Versi 10.0.0 hingga sebelum 10.0.12 |
| paloaltonetworks | pan-os | Versi 10.1.0 hingga sebelum 10.1.9 |
| paloaltonetworks | pan-os | Versi 10.2.0 hingga sebelum 10.2.4 |
| paloaltonetworks | pan-os | Versi 11.0.0 |
| paloaltonetworks | globalprotect | Versi 5.1.0 hingga sebelum 5.1.12 |
| paloaltonetworks | globalprotect | Versi 5.2.0 hingga sebelum 5.2.13 |
| paloaltonetworks | globalprotect | Versi 6.0.0 hingga sebelum 6.0.7 |
| paloaltonetworks | globalprotect | Versi 6.1.0 hingga sebelum 6.1.2 |
| paloaltonetworks | globalprotect | Versi 6.2.0 |
| paloaltonetworks | prisma access | Semua versi |