Info Exposure in PAN-OS GlobalProtect Exposes Uninstall Password & Passcode
CVE-2024-8687 Published on September 11, 2024
PAN-OS: Cleartext Exposure of GlobalProtect Portal Passcodes
An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstall, disable, or disconnect GlobalProtect even if the GlobalProtect app configuration would not normally permit them to do so.
Timeline
Initial publication
Weakness Type
Exposure of Sensitive System Information to an Unauthorized Control Sphere
The application does not properly prevent sensitive system-level information from being accessed by unauthorized actors who do not have the same level of access to the underlying system as the application does.
Products Associated with CVE-2024-8687
stack.watch emails you whenever new vulnerabilities are published in Palo Alto Networks PAN-OS or Palo Alto Networks Globalprotect. Just hit a watch button to start following.
Affected Versions
Palo Alto Networks PAN-OS:- Version 11.1.0 is unaffected.
- Version 11.2.0 is unaffected.
- Version 11.0.0 and below 11.0.1 is affected.
- Version 10.2.0 and below 10.2.4 is affected.
- Version 10.1.0 and below 10.1.9 is affected.
- Version 10.0.0 and below 10.0.12 is affected.
- Version 9.1.0 and below 9.1.16 is affected.
- Version 9.0.0 and below 9.0.17 is affected.
- Version 8.1.0 and below 8.1.25 is affected.
- Version 5.1.0 and below 5.1.12 is affected.
- Version 5.2.0 and below 5.2.13 is affected.
- Version 6.0.0 and below 6.0.7 is affected.
- Version 6.1.0 and below 6.1.2 is affected.
- Version 6.2.0 and below 6.2.1 is affected.
- Version 6.3.0 is unaffected.
- Version All is unaffected.
- Version 10.2.0 and below 10.2.9 on PAN-OS is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.