← CVE Intelligence

CVE-2023-6793

PAN-OS: XML API Keys Revoked by Read-Only PAN-OS Administrator PUBLISHED

Description (CNA)

An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to revoke active XML API keys from the firewall and disrupt XML API usage.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / PAN-OSunaffected 8.1 before All; affected 9.0 before 9.0.17-h4; affected 9.1 before 9.1.17; affected 10.0 through All; affected 10.1 before 10.1.11; affected 10.2 before 10.2.5; affected 11.0 before 11.0.2; unaffected 11.1 before All
Palo Alto Networks / Prisma Accessunaffected All
Palo Alto Networks / Cloud NGFWunaffected All

CWE

CWE-269

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.