PT-2017-17019 · Palo Alto Networks · Terminal Services Agent

Publicado 2017-03-20 · Atualizado 2021-09-13 · CVE-2017-6356

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Terminal Services Agent versions 6.0 through 8.0

Description The issue allows attackers to obtain sensitive session information due to weak permissions for unspecified resources.

Recommendations For versions 6.0 through 8.0, update to version 8.0.1 or later to resolve the issue.

Correção

Incorrect Permission

Enumeração de Fraquezas

CWE-732

Identificadores relacionados

CVE-2017-6356

Produtos afetados

Terminal Services Agent

Referências · 4

• https://security.paloaltonetworks.com/CVE-2017-6356 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-6356 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-6356 · Nota de Segurança
• http://securityfocus.com/bid/96925 · Aviso do Fabricante