CVE-2017-7217

The Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9 allows remote attackers to write to export files via unspecified parameters.

CVSS v3 4.3 MEDIUM
CVSS v2.0 4.0 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact LOW

Availability Impact NONE

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.securityfocus.com/bid/97598	Third Party Advisory VDB Entry
http://www.securitytracker.com/id/1038247
https://security.paloaltonetworks.com/CVE-2017-7217

Configurations

Configuration 1 (hide)

OR	cpe:2.3:o:paloaltonetworks:pan-os::::::::
	cpe:2.3:o:paloaltonetworks:pan-os:7.1.0:::::::*
	cpe:2.3:o:paloaltonetworks:pan-os:7.1.1:::::::*
	cpe:2.3:o:paloaltonetworks:pan-os:7.1.2:::::::*
	cpe:2.3:o:paloaltonetworks:pan-os:7.1.3:::::::*
	cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:::::::*
	cpe:2.3:o:paloaltonetworks:pan-os:7.1.4-h2:::::::*
	cpe:2.3:o:paloaltonetworks:pan-os:7.1.5:::::::*
	cpe:2.3:o:paloaltonetworks:pan-os:7.1.6:::::::*
	cpe:2.3:o:paloaltonetworks:pan-os:7.1.7:::::::*
	cpe:2.3:o:paloaltonetworks:pan-os:7.1.8:::::::*

History

No history.

Information

Published : 2017-04-14 14:59

Updated : 2024-02-04 19:11

NVD link : CVE-2017-7217

Mitre link : CVE-2017-7217

CVE.ORG link : CVE-2017-7217

JSON object : View

Products Affected

paloaltonetworks

pan-os

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2017-7217", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": true, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2017-04-14T14:59:00.277", "references": [{"url": "http://www.securityfocus.com/bid/97598", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id/1038247", "source": "cve@mitre.org"}, {"url": "https://security.paloaltonetworks.com/CVE-2017-7217", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "The Management Web Interface in Palo Alto Networks PAN-OS before 7.0.14 and 7.1.x before 7.1.9 allows remote attackers to write to export files via unspecified parameters."}, {"lang": "es", "value": "La interfaz web de gesti\u00f3n de Palo Alto Networks PAN-OS en versiones anteriores a 7.0.14 y 7.1.x en versiones anteriores a 7.1.9 permite a los atacantes remotos escribir para exportar archivos a trav\u00e9s de par\u00e1metros no especificados."}], "lastModified": "2017-07-11T01:33:47.080", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "473E2EBD-2881-4EC4-B107-8E736D3EC0DB", "versionEndIncluding": "7.0.13"}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:7.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "685DCF3A-39BD-4C38-9DC4-2AF715BB65AF"}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:7.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94C08178-C348-4B87-B951-27BA9102E60C"}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:7.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DEFDAAE0-7A3B-4B9A-BC2A-AE5E8BCAE406"}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:7.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "32839A0C-6229-430C-88A7-9E0ECC9F49CD"}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6A695BB-D919-4025-B5C3-7BFDF4D602F4"}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:7.1.4-h2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADBFA14A-BFD0-4B87-9F98-86703BF81644"}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:7.1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D0EB9B8-42D6-4011-81E6-90E3A9773D9C"}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:7.1.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F9B6C6A-4FF5-4807-AC02-F9E5526C4B28"}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:7.1.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE7CE914-E21C-4850-96D8-A5C31C32C065"}, {"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:7.1.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7B7D2AA1-7381-436E-A080-87867C681DF6"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}