vulnerability

Palo Alto Networks PAN-OS: CVE-2023-6791: PAN-OS: Plaintext Disclosure of External System Integration Credentials

Severity
6
CVSS
(AV:N/AC:L/Au:M/C:C/I:N/A:N)
Published
Dec 13, 2023
Added
Jan 7, 2025
Modified
Jan 13, 2026

Description

A credential disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to obtain the plaintext credentials of stored external system integrations such as LDAP, SCP, RADIUS, TACACS+, and SNMP from the web interface.

Solution

palo-alto-networks-pan-os-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.