CVE-2024-8688
PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)
Severity
Medium 6.7
CVSS 4.0
Exploited
Not listed
EPSS
0.002
14.7th percentile
Discovered by
Third party
Vendor-published field
Published
Sep 11, 2024
Assigned by palo_alto
Description
An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables authenticated administrators (including read-only administrators) with access to the CLI to to read arbitrary files on the firewall.
Weakness: CWE-155
Affected products
| Vendor | Product | Category | Matched by |
|---|---|---|---|
| Palo Alto Networks | PAN-OS | Firewall / NGFW | cna-assigner |
Vendor-reported products (3)
- Palo Alto Networks · PAN-OS
- Palo Alto Networks · Cloud NGFW — vendor states not affected
- Palo Alto Networks · Prisma Access — vendor states not affected
Credit
Matei "Mal" Badanoiu of Deloitte
Vendor remediation
This issue is fixed in PAN-OS 9.1.15, PAN-OS 10.0.10, PAN-OS 10.1.1, and all later PAN-OS versions.