CVE-2024-5916 MEDIUM

CVE-2024-5916: PAN-OS: Cleartext Exposure of External System Secrets

Vendor Palo Alto Networks
Product PAN-OS
Weakness CWE-313
Published August 14, 2024
Last update April 30, 2025
View on NVD All CVEs

CVSS base score

6.0/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction —
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber

What the vulnerability does

01Description

An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to unintentionally disclose secrets, passwords, and tokens of external systems. A read-only administrator who has access to the config log, can read secrets, passwords, and tokens to external systems.

Key dates

02Disclosure timeline

August 14, 2024 CVE published
April 30, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-64305 Columbia Weather Systems MicroServer Cleartext Storage in a File or on Disk CVE-2026-6796 Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in file CVE-2023-0114 Netis Netcore Router Backup param.file.tgz cleartext storage in a file or on disk CVE-2024-30406 Junos OS Evolved: ACX Series with Paragon Active Assurance Test Agent: A local high privileged attacker can recover other administrators credentials CVE-2026-52783 OpenProject: Information Disclosure (cleartext storage of data) on localhost through memcached via Others "storage.<id>.httpx_access_token" leads to Sensitive Data Exposure