CVE-2023-6793
An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to revoke active XML API keys from the firewall and disrupt XML API usage.
- Score
- CVSS 3.1 2.7 Low
- Status
- Modified - psirt@paloaltonetworks.com
- Published
- 2023-12-13
- Last modified
- 2024-12-02
- Weaknesses
- CWE-269
Affected products
- Cloud Ngfw (Palo Alto Networks)
- Pan-os (Palo Alto Networks)
- Prisma Access (Palo Alto Networks)
- Pan-os (Paloaltonetworks)
References
- https://security.paloaltonetworks.com/CVE-2023-6793