Palo Alto Networks PAN-OS CVE-2017-17841 Information Disclosure Vulnerability

Bugtraq ID:	102458
Class:	Design Error
CVE:	CVE-2017-17841
Remote:	Yes
Local:	No
Published:	Jan 01 2018 12:00AM
Updated:	Jul 04 2018 06:00AM
Credit:	The vendor has reported this issue.
Vulnerable:	Paloaltonetworks PAN-OS 6.1.0 0 Paloaltonetworks PAN-OS 8.0.2 Paloaltonetworks PAN-OS 8.0.1 Paloaltonetworks PAN-OS 7.1 Paloaltonetworks PAN-OS 8.0.6h3 Paloaltonetworks PAN-OS 8.0.6 Paloaltonetworks PAN-OS 8.0.5 Paloaltonetworks PAN-OS 8.0.4 Paloaltonetworks PAN-OS 8.0.3 Paloaltonetworks PAN-OS 8.0
Not Vulnerable:	Paloaltonetworks PAN-OS 8.0.7

Palo Alto Networks PAN-OS CVE-2017-17841 Information Disclosure Vulnerability

Palo Alto Networks PAN-OS is prone to an information disclosure vulnerability

An attacker can exploit this issue to perform man-in-the-middle attack and obtain sensitive information. Successful exploits will lead to other attacks.

The following PAN-OS versions are affected:

PAN-OS 6.1
PAN-OS 7.1
PAN-OS 8.0.6-h3 and earlier

Palo Alto Networks PAN-OS CVE-2017-17841 Information Disclosure Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Palo Alto Networks PAN-OS CVE-2017-17841 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Palo Alto Networks PAN-OS CVE-2017-17841 Information Disclosure Vulnerability

References:

• Palo Alto Networks Homepage (Palo Alto Networks)
  
• Paloaltonetworks Advisory (paloaltonetworks)