CVE-2023-38046
MediumCVSS 5.5Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
A vulnerability exists in Palo Alto Networks PAN-OS software that allows an authenticated administrator with the privilege to commit a specifically created configuration to read local files and resources from the system.
Risk Assessment
This vulnerability could lead to unauthorized access to sensitive data on the system, posing a significant security risk to the organization.
Recommendation
It is recommended to limit administrator privileges and monitor system configurations to minimize the risk of exploitation of this vulnerability.
Original NVD description (English source)
A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically created configuration to read local files and resources from the system.