Description (CNA)
An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to unintentionally disclose secrets, passwords, and tokens of external systems. A read-only administrator who has access to the config log, can read secrets, passwords, and tokens to external systems.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Palo Alto Networks / PAN-OS | unaffected 9.1; unaffected 10.1; affected 10.2 before 10.2.8; affected 11.0 before 11.0.4; unaffected 11.1 |
| Palo Alto Networks / Cloud NGFW | affected Before 8/15; unaffected On or after 8/15; affected Before 8/23; unaffected On or after 8/23 |
| Palo Alto Networks / Prisma Access | unaffected All |
CWE
CWE-313
References
ADP enrichment
No English description supplied.
No references supplied.