{"id":"CVE-2023-0008","published":"2023-05-10T16:34:18Z","modified":"2025-02-10T21:56:14Z","title":"PAN-OS: Local File Disclosure Vulnerability in the PAN-OS Web Interface","vendor":"Palo Alto Networks","product":"PAN-OS","tier":"tail","description":{"text":"A file disclosure vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-write administrator with access to the web interface to export local files from the firewall through a race condition.\n\n","provenance":"source","from":"CVE.org"},"cvss":{"score":4.4,"severity":"MEDIUM","version":"3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.00542,"percentile":0.45411,"provenance":"source"},"cwes":[{"id":"CWE-73","name":"External Control of File Name or Path"}],"references":[{"url":"https://security.paloaltonetworks.com/CVE-2023-0008","tags":[]}],"priority":{"score":12.2,"factors":[{"name":"EPSS percentile","points":9.08},{"name":"CVSS severity","points":3.08}]},"vendorSlug":"palo-alto-networks","affectedVersions":[{"vendor":"Palo Alto Networks","product":"PAN-OS","versions":[">= 8.1, < 8.1.25",">= 9.0, < 9.0.17",">= 9.1, < 9.1.16",">= 10.0, < 10.0.12",">= 10.1, < 10.1.10",">= 10.2, < 10.2.4",">= 11.0, < 11.0.1"]}],"euvd":{"id":"EUVD-2023-12113","exploited":false,"provenance":"source"},"lineage":{"familyId":"fam-class-palo-alto-networks-pan-os-cwe-73"}}