PT-2017-17019 · Palo Alto Networks · Terminal Services Agent

Published 2017-03-20 · Updated 2021-09-13 · CVE-2017-6356

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Palo Alto Networks Terminal Services Agent versions 6.0 through 8.0

Description The issue allows attackers to obtain sensitive session information due to weak permissions for unspecified resources.

Recommendations For versions 6.0 through 8.0, update to version 8.0.1 or later to resolve the issue.

Fix

Incorrect Permission

Weakness Enumeration

CWE-732

Related Identifiers

CVE-2017-6356

Affected Products

Terminal Services Agent

References · 4

• https://security.paloaltonetworks.com/CVE-2017-6356 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-6356 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-6356 · Security Note
• http://securityfocus.com/bid/96925 · Vendor Advisory