Vulnerabilities > Paloaltonetworks > PAN OS > 4.0.6

DATE CVE VULNERABILITY TITLE RISK
2013-08-31 CVE-2012-6596 Credentials Management vulnerability in Paloaltonetworks Pan-Os
Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.3 stores cleartext LDAP bind passwords in authd.log, which allows context-dependent attackers to obtain sensitive information by reading this file, aka Ref ID 35493.
network
low complexity
paloaltonetworks CWE-255
5.0
2013-08-31 CVE-2012-6595 OS Command Injection vulnerability in Paloaltonetworks Pan-Os
The device-management command-line interface in Palo Alto Networks PAN-OS 4.0.x before 4.0.9 and 4.1.x before 4.1.2 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34595.
network
low complexity
paloaltonetworks CWE-78
critical
9.0
2013-08-31 CVE-2012-6594 OS Command Injection vulnerability in Paloaltonetworks Pan-Os
The device-management command-line interface in Palo Alto Networks PAN-OS before 3.1.11, 4.0.x before 4.0.8, and 4.1.x before 4.1.1 allows remote authenticated administrators to execute arbitrary commands via unspecified vectors, aka Ref ID 34299.
network
low complexity
paloaltonetworks CWE-78
critical
9.0
2013-08-31 CVE-2012-6590 Information Exposure vulnerability in Paloaltonetworks Pan-Os
The web-based management UI in Palo Alto Networks PAN-OS 4.0.x before 4.0.8 allows remote attackers to obtain verbose error information via crafted input, aka Ref ID 33139.
4.3