Description
An improper privilege management vulnerability in Palo Alto Networks PAN-OS software enables an authenticated read-only administrator to revoke active XML API keys from the firewall and disrupt XML API usage.
Metrics
CVSS 3.1 2.7/10
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:LWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| Palo Alto Networks | PAN-OS | >= 9.0, < 9.0.17-h4; >= 9.1, < 9.1.17; >= 10.0, <= All; >= 10.1, < 10.1.11; >= 10.2, < 10.2.5; >= 11.0, < 11.0.2 |
| Palo Alto Networks | Prisma Access | — |
| Palo Alto Networks | Cloud NGFW | — |
References
- https://security.paloaltonetworks.com/CVE-2023-6793Vendor Advisory
- https://security.paloaltonetworks.com/CVE-2023-6793Vendor Advisory
Timeline
- Published
- Dec 13, 2023
- Last modified
- Jun 17, 2026
- NVD status
- Modified