Yüksek CVSS 8.7
CVE-2026-0240: Trust Protection Foundation: güvenlik açığı
Açıklama (NVD)
An information disclosure vulnerability in Trust Protection Foundation enables an authenticated attacker to obtain sensitive information from the server's vault. Successful exploitation of this issue allows the attacker to impersonate any user within the environment and arbitrarily modify configuration settings.
Özet bilgiler
- Ürün
- Paloaltonetworks Trust Protection Foundation
- CVSS v3.1
- 8.7
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N - CVSS v4.0
- 4.5
CVSS:4.0/AV:A/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:L/SI:L/SA:N/E:U/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:U/V:D/RE:M/U:Amber - EPSS
- %0,24 (yüzdelik 15)
- CWE
- CWE-497
- Yama
- Yok / bilinmiyor
Etkilenen sürümler
| Ürün | Başlangıç | Bitiş | Düzeltildi |
|---|---|---|---|
| paloaltonetworks-trust-protection-foundation | 24.1.0 | — | 24.1.13 |
| paloaltonetworks-trust-protection-foundation | 24.3.0 | — | 24.3.6 |
| paloaltonetworks-trust-protection-foundation | 25.1.0 | — | 25.1.8 |
| paloaltonetworks-trust-protection-foundation | 25.3.0 | — | 25.3.3 |