CVE-2023-0004

PAN-OS: Local File Deletion Vulnerability

State: Published
Severity: 6.5 Medium
Published: Apr 12, 2023
Updated: Feb 13, 2025
Reserved: Oct 27, 2022

Description

A local file deletion vulnerability in Palo Alto Networks PAN-OS software enables an authenticated administrator to delete files from the local file system with elevated privileges.

These files can include logs and system components that impact the integrity and availability of PAN-OS software.

Scores

CVSS	Score	Vector	Source
3.1	6.5 Medium	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H	palo_alto

Weaknesses

CWE-703 Improper Check or Handling of Exceptional Conditions

Affected Products

Product	Versions
PAN-OSPalo Alto Networks	8.1 to before 8.1.24Affectedfrom 8.1.24Not affected 9.0 to before 9.0.17Affectedfrom 9.0.17Not affected 9.1 to before 9.1.15Affectedfrom 9.1.15Not affected 10.0 to before 10.0.11Affectedfrom 10.0.11Not affected 10.1 to before 10.1.6Affectedfrom 10.1.6Not affected 10.2Not affected 11.0Not affected
Prisma AccessPalo Alto Networks	AllNot affected
Cloud NGFWPalo Alto Networks	AllNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.