Medium severity6.5NVD Advisory· Published Apr 29, 2017· Updated May 13, 2026
CVE-2017-7644
CVE-2017-7644
Description
The Management Web Interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, and 7.1.x before 7.1.9 allows remote authenticated users to obtain sensitive information by leveraging incorrect permission validation, aka PAN-SA-2017-0013 and PAN-70541.
Affected products
27cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*+ 26 more
- cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*range: <=6.1.15
- cpe:2.3:o:paloaltonetworks:pan-os:7.0.0:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.0.1:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.0.10:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.0.11:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.0.12:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.0.13:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.0.14:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.0.2:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.0.3:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.0.4:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.0.5:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.0.5:h2:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.0.6:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.0.7:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.0.8:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.0.9:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.1.0:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.1.1:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.1.2:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.1.3:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.1.4:h2:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.1.5:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.1.6:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.1.7:*:*:*:*:*:*:*
- cpe:2.3:o:paloaltonetworks:pan-os:7.1.8:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.