CVE-2024-5916

An information exposure vulnerability in Palo Alto Networks PAN-OS software enables a local system administrator to unintentionally disclose secrets, passwords, and tokens of external systems. A read-only administrator who has access to the config log, can read secrets, passwords, and tokens to external systems.

Scoring

Severity

MEDIUM

CVSS base score

6

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:L/VI:N/VA:N/SC:H/SI:N/SA:N/AU:N/R:U/V:C/RE:H/U:Amber

EPSS probability

0.25%

CWE

CWE-313

Published

2024-08-14

Last modified

2026-03-13

Affected products

• Palo Alto Networks PAN-OS
• Palo Alto Networks PAN-OS
• Palo Alto Networks PAN-OS
• Palo Alto Networks PAN-OS
• Palo Alto Networks PAN-OS
• Palo Alto Networks Cloud NGFW
• Palo Alto Networks Cloud NGFW
• Palo Alto Networks Cloud NGFW

Weakness type

• CWE-313

Related vulnerabilities

• CVE-2026-14663 — PostgreSQL pgcrypto, for OpenSSL-disabled ciphers, silently encrypts to and decrypts from cleartext
• CVE-2026-8804 — Cleartext Storage of Sensitive Information for Puppet Resource API
• CVE-2026-52783 — OpenProject: Information Disclosure (cleartext storage of data) on localhost through memcached via Others "storage.<id>.httpx_access_token" leads to Sensitive Data Exposure
• CVE-2026-24349 — A vulnerability has been identified in SIMATIC WinCC Unified PC Runtime V16 (All versions), SIMATIC...
• CVE-2025-4397 — Medtronic MyCareLink Patient Monitor Data Encryption Weakness
• CVE-2026-6796 — Sanluan PublicCMS Failed Login LoginAdminController.java log_login cleartext storage in file
• CVE-2026-6598 — langflow-ai langflow Project Creation Endpoint projects.py encrypt_auth_settings cleartext storage in file
• CVE-2026-5531 — SourceCodester Student Result Management System HTTP GET Request login_credentials.txt cleartext storage in file

Markdown version · Browse all CVEs