2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2017-7644" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2017-04-29T00:59:00.167" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T03:32:21.740" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, and 7.1.x before 7.1.9 allows remote authenticated users to obtain sensitive information by leveraging incorrect permission validation, aka PAN-SA-2017-0013 and PAN-70541."
} ,
{
"lang" : "es" ,
"value" : "La interfaz de gesti\u00f3n web en PAN-OS de Palo Alto Networks versiones anteriores a 6.1.17, versiones 7.x anteriores a 7.1.9 y versiones 7.1.x anteriores a 7.1.9 permite a usuarios autenticados remotos la obtenci\u00f3n de informaci\u00f3n sensible aprovechando una validaci\u00f3n incorrecta de permisos. Referenciada tambi\u00e9n como PAN-SA-2017-0013 y PAN-70541."
}
] ,
"metrics" : {
"cvssMetricV30" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.0" ,
"vectorString" : "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 6.5 ,
"baseSeverity" : "MEDIUM" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "LOW" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "HIGH" ,
"integrityImpact" : "NONE" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 2.8 ,
"impactScore" : 3.6
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:S/C:P/I:N/A:N" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 4.0 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "SINGLE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "NONE" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 8.0 ,
"impactScore" : 2.9 ,
"acInsufInfo" : true ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-200"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*" ,
"versionEndIncluding" : "6.1.15" ,
"matchCriteriaId" : "E21D41C6-2ED7-46E1-A75D-62A9D8A671FE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "624F100E-2163-4B32-8F9A-02CB98A54F8B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "4EE577FC-15FF-4E57-8257-DCDFFB2A9985"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6BCC7DB4-24B3-4F4A-86C5-B9D59E891E2F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "9EC541C0-0BB9-4011-A3B8-DDCD00A324F7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D8F8C2BE-21DE-49FE-A58F-97158657EF24"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BDB6D0AB-5364-432A-8F7A-9DB53E1BF5D2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.5:h2:*:*:*:*:*:*" ,
"matchCriteriaId" : "DB55A087-CFA7-45F3-8FEF-9A37804073A3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0BEEBF0F-FBB2-43B7-9F56-0FBF2DADCA2F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "831890DD-6702-4AA1-9F20-B0E22B06043A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "448EC192-C6FD-4E97-AE26-51001986E7FC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.9:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "A02BEFED-A8AB-4A51-8E01-69123C20F9FA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.10:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "59E29A65-120E-4FB6-B54B-8E86B52CED05"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.11:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C9A95E6A-CD9A-473B-A6DC-AE2E48684A02"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.12:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F9C19ADE-22F7-42D0-A6FD-81EDB334B484"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.13:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "E8AAF08A-5478-4942-8CC0-0F267F464684"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.0.14:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "033CDBB8-59A7-44BA-B28C-57A91CCD0B83"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "685DCF3A-39BD-4C38-9DC4-2AF715BB65AF"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "94C08178-C348-4B87-B951-27BA9102E60C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "DEFDAAE0-7A3B-4B9A-BC2A-AE5E8BCAE406"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "32839A0C-6229-430C-88A7-9E0ECC9F49CD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "B6A695BB-D919-4025-B5C3-7BFDF4D602F4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:h2:*:*:*:*:*:*" ,
"matchCriteriaId" : "EEA3E4BA-6127-4864-BFD8-6A14BA99BD3F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "5D0EB9B8-42D6-4011-81E6-90E3A9773D9C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7F9B6C6A-4FF5-4807-AC02-F9E5526C4B28"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "AE7CE914-E21C-4850-96D8-A5C31C32C065"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:o:paloaltonetworks:pan-os:7.1.8:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "7B7D2AA1-7381-436E-A080-87867C681DF6"
}
]
}
]
}
] ,
"references" : [
{
"url" : "https://security.paloaltonetworks.com/CVE-2017-7644" ,
"source" : "cve@mitre.org"
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "https://security.paloaltonetworks.com/CVE-2017-7644" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}
