Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified resources, which allows attackers to obtain sensitive session information via unknown vectors.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/96925 | Third Party Advisory VDB Entry Vendor Advisory |
| https://security.paloaltonetworks.com/CVE-2017-6356 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
13 Sep 2021, 12:05
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:palo_alto_networks:terminal_services_agent:8.0:*:*:*:*:*:*:* cpe:2.3:a:palo_alto_networks:terminal_services_agent:7.0:*:*:*:*:*:*:* |
cpe:2.3:a:paloaltonetworks:terminal_services_agent:7.0:*:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:terminal_services_agent:8.0:*:*:*:*:*:*:* cpe:2.3:a:paloaltonetworks:terminal_services_agent:6.0:*:*:*:*:*:*:* |
| References | (BID) http://www.securityfocus.com/bid/96925 - Third Party Advisory, VDB Entry, Vendor Advisory | |
| References | (CONFIRM) https://security.paloaltonetworks.com/CVE-2017-6356 - Vendor Advisory |
Information
Published : 2017-03-20 16:59
Updated : 2023-12-10 12:01
NVD link : CVE-2017-6356
Mitre link : CVE-2017-6356
CVE.ORG link : CVE-2017-6356
JSON object : View
Products Affected
paloaltonetworks
- terminal_services_agent
CWE
CWE-732
Incorrect Permission Assignment for Critical Resource