Information disclosure in Palo Alto PAN-OS

1) Information disclosure

EUVDB-ID: #VU39469

Risk: Medium

CVSSv4.0: 4.9 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:U/U:Green]

CVE-ID: CVE-2017-5583

CWE-ID: CWE-200 - Exposure of sensitive information to an unauthorized actor

Exploit availability: No

Description

The vulnerability allows a remote authenticated user to gain access to sensitive information.

The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.16, 7.0.x before 7.0.13, and 7.1.x before 7.1.8 allows remote authenticated users to read arbitrary files via unspecified vectors.

Mitigation

Install update from vendor's website.

Vulnerable software versions

Palo Alto PAN-OS: 7.0.1 - 7.1.7

CPE2.3

• cpe:2.3:o:palo_alto_networks:pan-os:7.0.1:*:*:*:*:*:*:*
• cpe:2.3:o:palo_alto_networks:pan-os:7.0.2:*:*:*:*:*:*:*
• cpe:2.3:o:palo_alto_networks:pan-os:7.0.3:*:*:*:*:*:*:*
• cpe:2.3:o:palo_alto_networks:pan-os:7.0.4:*:*:*:*:*:*:*
• cpe:2.3:o:palo_alto_networks:pan-os:7.0.5:*:*:*:*:*:*:*
• cpe:2.3:o:palo_alto_networks:pan-os:7.0.5-h2:*:*:*:*:*:*:*
• cpe:2.3:o:palo_alto_networks:pan-os:7.0.6:*:*:*:*:*:*:*
• cpe:2.3:o:palo_alto_networks:pan-os:7.0.7:*:*:*:*:*:*:*
• cpe:2.3:o:palo_alto_networks:pan-os:7.0.8:*:*:*:*:*:*:*
• cpe:2.3:o:palo_alto_networks:pan-os:7.0.9:*:*:*:*:*:*:*

External links

https://www.securityfocus.com/bid/96370
https://www.securitytracker.com/id/1037890
https://security.paloaltonetworks.com/CVE-2017-5583

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.