2 lines
6.0 KiB
JSON
2 lines
6.0 KiB
JSON
{"affected":[{"affectedData":[{"defaultStatus":"unaffected","product":"PAN-OS","vendor":"Palo Alto Networks","versions":[{"changes":[{"at":"9.0.17-h2","status":"unaffected"}],"lessThan":"9.0.17-h2","status":"affected","version":"9.0","versionType":"custom"},{"changes":[{"at":"9.0.18","status":"unaffected"}],"lessThan":"9.0.18","status":"affected","version":"9.0","versionType":"custom"},{"changes":[{"at":"9.1.17","status":"unaffected"}],"lessThan":"9.1.17","status":"affected","version":"9.1","versionType":"custom"},{"changes":[{"at":"10.0.12-h1","status":"unaffected"}],"lessThan":"10.0.12-h1","status":"affected","version":"10.0","versionType":"custom"},{"changes":[{"at":"10.0.13","status":"unaffected"}],"lessThan":"10.0.13","status":"affected","version":"10.0","versionType":"custom"},{"changes":[{"at":"10.1.10-h1","status":"unaffected"}],"lessThan":"10.1.10-h1","status":"affected","version":"10.1","versionType":"custom"},{"changes":[{"at":"10.1.11","status":"unaffected"}],"lessThan":"10.1.11","status":"affected","version":"10.1","versionType":"custom"},{"changes":[{"at":"10.2.5","status":"unaffected"}],"lessThan":"10.2.5","status":"affected","version":"10.2","versionType":"custom"},{"changes":[{"at":"11.0.2","status":"unaffected"}],"lessThan":"11.0.2","status":"affected","version":"11.0","versionType":"custom"},{"lessThan":"All","status":"unaffected","version":"11.1","versionType":"custom"}]},{"defaultStatus":"unaffected","product":"Prisma Access","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All"}]},{"defaultStatus":"unaffected","product":"Cloud NGFW","vendor":"Palo Alto Networks","versions":[{"status":"unaffected","version":"All"}]}],"source":"psirt@paloaltonetworks.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"831B815F-436B-40D2-AFBA-9BE7275C2BEB","versionEndExcluding":"10.2.5","versionStartIncluding":"10.2.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"8A69845B-51CA-4612-BCBA-96EF92F01D2F","versionEndExcluding":"11.0.2","versionStartIncluding":"11.0.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"8F25D99D-0E7C-469B-977E-FCBD0AB2373E","versionEndExcluding":"10.1.10","versionStartIncluding":"10.1.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.1.10:-:*:*:*:*:*:*","matchCriteriaId":"4F0DB7CB-C200-48C4-9E28-E378AA9A3FA2","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"71F1F86A-8158-4BE8-B509-5F50421DA829","versionEndExcluding":"10.0.12","versionStartIncluding":"10.0.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:10.0.12:-:*:*:*:*:*:*","matchCriteriaId":"E280D93F-B51F-4F59-9CCE-829C1F9F1A78","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"9F9FFBA6-7008-422B-9CF1-E37CA62081EB","versionEndExcluding":"9.1.17","versionStartIncluding":"9.1.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*","matchCriteriaId":"89A55C5F-8E01-42C4-BE93-D683900C07BE","versionEndExcluding":"9.0.17","versionStartIncluding":"9.0.0","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:9.0.17:-:*:*:*:*:*:*","matchCriteriaId":"CDAE9753-EF8D-4B15-A73C-0EF56FE6C78C","vulnerable":true},{"criteria":"cpe:2.3:o:paloaltonetworks:pan-os:9.0.17:h1:*:*:*:*:*:*","matchCriteriaId":"2A142EE1-E516-4582-9A7E-6E4C74FB3991","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Web sessions in the management interface in Palo Alto Networks PAN-OS software do not expire in certain situations, making it susceptible to unauthorized access."},{"lang":"es","value":"Las sesiones web en la interfaz de administración del software PAN-OS de Palo Alto Networks no caducan en determinadas situaciones, lo que las hace susceptibles a accesos no autorizados."}],"id":"CVE-2024-0008","lastModified":"2026-06-17T06:52:35.460","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"PHYSICAL","availabilityImpact":"HIGH","baseScore":6.6,"baseSeverity":"MEDIUM","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":0.7,"impactScore":5.9,"source":"psirt@paloaltonetworks.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2024-0008","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2024-02-15T16:01:38.595257Z","version":"2.0.3"}}]},"published":"2024-02-14T18:15:47.310","references":[{"source":"psirt@paloaltonetworks.com","tags":["Vendor Advisory"],"url":"https://security.paloaltonetworks.com/CVE-2024-0008"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://security.paloaltonetworks.com/CVE-2024-0008"}],"sourceIdentifier":"psirt@paloaltonetworks.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-613"}],"source":"psirt@paloaltonetworks.com","type":"Secondary"},{"description":[{"lang":"en","value":"CWE-613"}],"source":"nvd@nist.gov","type":"Primary"}]}
|