Skip to main content

Cleartext Storage in a File or on Disk

CVE-2024-5916

Medium
6/10

Summary

An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to unintentionally disclose secrets, passwords, and tokens of external systems. A read-only administrator who has access to the config log, can read secrets, passwords, and tokens to external systems.

  • LOW
  • LOCAL
  • NONE
  • UNCHANGED
  • NONE
  • HIGH
  • HIGH
  • NONE

CWE-313 - Cleartext Storage in a File or on Disk

The application stores sensitive information in cleartext in a file, or on disk.

References

Advisory Timeline

  • Published