CVE-2023-38046: PAN-OS: Read System Files and Resources During Configuration Commit
A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically created configuration to read local files and resources from the system.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
palo-alto-networks/pan-osto a version that resolves this vulnerability.Fixed in 10.2.4 - Upgrade
Upgrade
palo-alto-networks/pan-osto a version that resolves this vulnerability.Fixed in 11.0.1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-38046?
The severity of CVE-2023-38046 is medium.
How can an authenticated administrator exploit CVE-2023-38046?
An authenticated administrator with the privilege to commit a specifically created configuration can exploit CVE-2023-38046 to read local files and resources from the system.
Which versions of Palo Alto Networks PAN-OS software are affected by CVE-2023-38046?
Palo Alto Networks PAN-OS software versions 11.0.0 and versions between 10.2.0 and 10.2.4 are affected by CVE-2023-38046.
How can I fix CVE-2023-38046?
To fix CVE-2023-38046, update the Palo Alto Networks PAN-OS software to a version that is not affected by the vulnerability.
Where can I find more information about CVE-2023-38046?
You can find more information about CVE-2023-38046 on the Palo Alto Networks security advisory page: [https://security.paloaltonetworks.com/CVE-2023-38046](https://security.paloaltonetworks.com/CVE-2023-38046).