CVE-2024-8688

PAN-OS: Arbitrary File Read Vulnerability in the Command Line Interface (CLI)

State: Published
Severity: 6.7 Medium
Published: Sep 11, 2024
Updated: Sep 11, 2024
Reserved: Sep 11, 2024

Description

An improper neutralization of matching symbols vulnerability in the Palo Alto Networks PAN-OS command line interface (CLI) enables authenticated administrators (including read-only administrators) with access to the CLI to to read arbitrary files on the firewall.

Scores

CVSS	Score	Vector	Source
4.0	6.7 Medium	CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/AU:N/R:U/V:C/RE:M/U:Amber	palo_alto

Weaknesses

CWE-155 Improper Neutralization of Wildcards or Matching Symbols

Affected Products

Product	Versions
PAN-OSPalo Alto Networks	9.1.0 to before 9.1.15Affectedfrom 9.1.15Not affected 10.0.0 to before 10.0.10Affectedfrom 10.0.10Not affected 10.1.0 to before 10.1.1Affectedfrom 10.1.1Not affected 10.2.0Not affected 11.0.0Not affected 11.1.0Not affected 11.2.0Not affected
Cloud NGFWPalo Alto Networks	AllNot affected
Prisma AccessPalo Alto Networks	AllNot affected

References

https://security.paloaltonetworks.com/CVE-2024-8688

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.