CVE-2012-6596

Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.3 stores cleartext LDAP bind passwords in authd.log, which allows context-dependent attackers to obtain sensitive information by reading this file, aka Ref ID 35493.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2013-08-31

Last modified

2024-08-06

Weaknesses

CWE-255

Affected products

• Pan-os (Paloaltonetworks)

References

• https://security.paloaltonetworks.com/CVE-2012-6596