CVE-2023-6791

Summary

CVE-2023-6791 is a credential disclosure vulnerability affecting Palo Alto Networks PAN-OS software. This issue allows authenticated read-only administrators to access and obtain the plaintext credentials of stored external system integrations, including LDAP, SCP, RADIUS, TACACS+, and SNMP, through the web interface. This poses a significant risk as the exposed credentials may be leveraged by unauthorized users to gain unapproved access to these external systems. It is crucial for organizations using the impacted software to apply the available patch or workaround to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.