PT-2012-6285 · Palo Alto Networks · Pan-Os

Publicado 2012-04-27 · Atualizado 2020-02-17 · CVE-2012-6596

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS versions 3.1.x and earlier, 4.0.x through 4.0.8, 4.1.x through 4.1.2

Description The issue allows context-dependent attackers to obtain sensitive information by reading the authd.log file, where cleartext LDAP bind passwords are stored. This results in administrator passwords being logged and stored in clear text, potentially leading to unauthorized administration of the device.

Recommendations For versions 4.0.x through 4.0.8, consider disabling the default 'debug' logging level to prevent cleartext LDAP bind passwords from being logged to authd.log until a patch is available. For versions 4.1.x through 4.1.2, restrict access to the authd.log file to minimize the risk of exploitation. For versions 3.1.x and earlier, update to a version that does not store cleartext LDAP bind passwords in authd.log. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2012-6596

Produtos afetados

Pan-Os

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2012-6596 · Nota de Segurança
• https://security.paloaltonetworks.com/CVE-2012-6596 · Nota