PT-2023-7757 · Palo Alto Networks · Pan-Os

Published 2023-12-13 · Updated 2023-12-18 · CVE-2023-6793

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Palo Alto Networks PAN-OS (affected versions not specified)

Description The issue is related to improper privilege management in the software, allowing an authenticated read-only administrator to revoke active XML API keys from the firewall. This can disrupt XML API usage and potentially cause a denial of service. The vulnerability can be exploited by a remote attacker to cause a service disruption by resetting current valid API keys.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Privilege Management

Weakness Enumeration

CWE-269

CWE-264

Related Identifiers

BDU:2023-08824

CVE-2023-6793

Affected Products

Pan-Os

References · 7

• https://security.paloaltonetworks.com/CVE-2023-6793 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-6793 · Security Note
• https://osv.dev/vulnerability/CVE-2023-6793 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-08824 · Security Note
• https://twitter.com/VulmonFeeds/status/1735002361733447752 · Twitter Post
• https://twitter.com/CVEnew/status/1735009782237413406 · Twitter Post
• https://twitter.com/RedPacketSec/status/1735602617617723737 · Twitter Post