CVE-2024-8687 — Exposure of Sensitive System Information to an Unauthorized Control Sphere in Palo Alto Networks Globalprotect APP

CWE-497 — Exposure of Sensitive System Information to an Unauthorized Control Sphere4 documents4 sources
Severity
6.9MEDIUMNVD
EPSS
0.4%
top 40.34%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
9
Palo Alto Networks Globalprotect APPPalo Alto Networks Pan-osPalo Alto Networks Prisma Access+6 more
Timeline
PublishedSep 11

Description

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstall, disable, or disconnect GlobalProtect even if the GlobalProtect app configuration would not normally permit them to do so.

CVSS vector

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N

Affected Packages9 packages

▶NVDpaloaltonetworks/globalprotect5.1.0 — 5.1.12+4
▶CVEListV5palo_alto_networks/globalprotect_app5.1.0 — 5.1.12+4
▶NVDpaloaltonetworks/pan-os8.1.0 — 8.1.25+6
▶CVEListV5palo_alto_networks/pan-os11.0.0 — 11.0.1+6

🔴Vulnerability Details

2
GHSA
GHSA-r589-95v2-93xr: An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured↗2024-09-11
▶
CVEList
PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes↗2024-09-11
▶

📋Vendor Advisories

1
Palo Alto
PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes↗2024-09-11
▶
CVE-2024-8687 — Palo vulnerability | cvebase