CVE-2023-6793
CVSS 3.1 Score 2.7 of 10 (low)
Details
Summary
CVE-2023-6793 is a privilege management vulnerability affecting Palo Alto Networks PAN-OS software. It allows authenticated read-only administrators to revoke active XML API keys, rendering the XML API functionality unusable. This issue could lead to disruptions in network security management and configuration through the XML API. Malicious actors could potentially exploit this vulnerability to cause denial-of-service conditions or gain unauthorized access, impacting the confidentiality, integrity, and availability of the affected system. It is essential for organizations using PAN-OS to apply the necessary patches to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- PAN-OS
Affected Vendors
- Palo Alto Networks Inc.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions