An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to unintentionally disclose secrets, passwords, and tokens of external systems. A read-only administrator who has access to the config log, can read secrets, passwords, and tokens to external systems.
Weakness
The product stores sensitive information in cleartext in a file, or on disk.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pan-os | Paloaltonetworks | 10.2.0 (including) | 10.2.8 (excluding) |
| Pan-os | Paloaltonetworks | 11.0.0 (including) | 11.0.4 (excluding) |