CVE-2024-8687
Estado: AnalizadaMedia (6.9)—
An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstall, disable, or disconnect GlobalProtect even if the GlobalProtect app configuration would not normally permit them to do so.
CVSS
- Versión: 4.0
- Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Amber
- Puntuación base: 6.9
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.41%
- Percentil entre todas las CVEs puntuadas: 33
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (3)
CWE
- CWE-497
- NVD-CWE-noinfo
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2024-8687",
"cveTags": [],
"metrics": {
"ssvcV203": [
{
"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"ssvcData": {
"id": "CVE-2024-8687",
"role": "CISA Coordinator",
"options": [
{
"exploitation": "none"
},
{
"automatable": "no"
},
{
"technicalImpact": "partial"
}
],
"version": "2.0.3",
"timestamp": "2024-09-11T18:23:36.439085Z"
}
}
],
"cvssMetricV31": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 7.1,
"attackVector": "NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:H",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "LOW",
"confidentialityImpact": "LOW"
},
"impactScore": 4.2,
"exploitabilityScore": 2.8
}
],
"cvssMetricV40": [
{
"type": "Secondary",
"source": "psirt@paloaltonetworks.com",
"cvssData": {
"Safety": "NOT_DEFINED",
"version": "4.0",
"Recovery": "AUTOMATIC",
"baseScore": 6.9,
"Automatable": "NO",
"attackVector": "LOCAL",
"baseSeverity": "MEDIUM",
"valueDensity": "DIFFUSE",
"vectorString": "CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:N/R:A/V:D/RE:M/U:Amber",
"exploitMaturity": "NOT_DEFINED",
"providerUrgency": "AMBER",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"privilegesRequired": "LOW",
"subIntegrityImpact": "NONE",
"vulnIntegrityImpact": "NONE",
"integrityRequirement": "NOT_DEFINED",
"modifiedAttackVector": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"vulnAvailabilityImpact": "LOW",
"availabilityRequirement": "NOT_DEFINED",
"modifiedUserInteraction": "NOT_DEFINED",
"modifiedAttackComplexity": "NOT_DEFINED",
"subConfidentialityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"confidentialityRequirement": "NOT_DEFINED",
"modifiedAttackRequirements": "NOT_DEFINED",
"modifiedPrivilegesRequired": "NOT_DEFINED",
"modifiedSubIntegrityImpact": "NOT_DEFINED",
"modifiedVulnIntegrityImpact": "NOT_DEFINED",
"vulnerabilityResponseEffort": "MODERATE",
"modifiedSubAvailabilityImpact": "NOT_DEFINED",
"modifiedVulnAvailabilityImpact": "NOT_DEFINED",
"modifiedSubConfidentialityImpact": "NOT_DEFINED",
"modifiedVulnConfidentialityImpact": "NOT_DEFINED"
}
}
]
},
"affected": [
{
"source": "psirt@paloaltonetworks.com",
"affectedData": [
{
"vendor": "Palo Alto Networks",
"product": "PAN-OS",
"versions": [
{
"status": "unaffected",
"version": "11.1.0"
},
{
"status": "unaffected",
"version": "11.2.0"
},
{
"status": "affected",
"changes": [
{
"at": "11.0.1",
"status": "unaffected"
}
],
"version": "11.0.0",
"lessThan": "11.0.1",
"versionType": "custom"
},
{
"status": "affected",
"changes": [
{
"at": "10.2.4",
"status": "unaffected"
}
],
"version": "10.2.0",
"lessThan": "10.2.4",
"versionType": "custom"
},
{
"status": "affected",
"changes": [
{
"at": "10.1.9",
"status": "unaffected"
}
],
"version": "10.1.0",
"lessThan": "10.1.9",
"versionType": "custom"
},
{
"status": "affected",
"changes": [
{
"at": "10.0.12",
"status": "unaffected"
}
],
"version": "10.0.0",
"lessThan": "10.0.12",
"versionType": "custom"
},
{
"status": "affected",
"changes": [
{
"at": "9.1.16",
"status": "unaffected"
}
],
"version": "9.1.0",
"lessThan": "9.1.16",
"versionType": "custom"
},
{
"status": "affected",
"changes": [
{
"at": "9.0.17",
"status": "unaffected"
}
],
"version": "9.0.0",
"lessThan": "9.0.17",
"versionType": "custom"
},
{
"status": "affected",
"changes": [
{
"at": "8.1.25",
"status": "unaffected"
}
],
"version": "8.1.0",
"lessThan": "8.1.25",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Palo Alto Networks",
"product": "GlobalProtect App",
"versions": [
{
"status": "affected",
"changes": [
{
"at": "5.1.12",
"status": "unaffected"
}
],
"version": "5.1.0",
"lessThan": "5.1.12",
"versionType": "custom"
},
{
"status": "affected",
"changes": [
{
"at": "5.2.13",
"status": "unaffected"
}
],
"version": "5.2.0",
"lessThan": "5.2.13",
"versionType": "custom"
},
{
"status": "affected",
"changes": [
{
"at": "6.0.7",
"status": "unaffected"
}
],
"version": "6.0.0",
"lessThan": "6.0.7",
"versionType": "custom"
},
{
"status": "affected",
"changes": [
{
"at": "6.1.2",
"status": "unaffected"
}
],
"version": "6.1.0",
"lessThan": "6.1.2",
"versionType": "custom"
},
{
"status": "affected",
"changes": [
{
"at": "6.2.1",
"status": "unaffected"
}
],
"version": "6.2.0",
"lessThan": "6.2.1",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "6.3.0"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Palo Alto Networks",
"product": "Cloud NGFW",
"versions": [
{
"status": "unaffected",
"version": "All"
}
],
"defaultStatus": "unaffected"
},
{
"vendor": "Palo Alto Networks",
"product": "Prisma Access",
"versions": [
{
"status": "affected",
"changes": [
{
"at": "10.2.9 on PAN-OS",
"status": "unaffected"
}
],
"version": "10.2.0",
"lessThan": "10.2.9 on PAN-OS",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
]
}
],
"published": "2024-09-11T17:15:14.157",
"references": [
{
"url": "https://security.paloaltonetworks.com/CVE-2024-8687",
"tags": [
"Vendor Advisory"
],
"source": "psirt@paloaltonetworks.com"
}
],
"vulnStatus": "Analyzed",
"weaknesses": [
{
"type": "Secondary",
"source": "psirt@paloaltonetworks.com",
"description": [
{
"lang": "en",
"value": "CWE-497"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstall, disable, or disconnect GlobalProtect even if the GlobalProtect app configuration would not normally permit them to do so."
},
{
"lang": "es",
"value": "Existe una vulnerabilidad de exposición de información en el software PAN-OS de Palo Alto Networks que permite que un usuario final de GlobalProtect conozca tanto la contraseña de desinstalación de GlobalProtect configurada como el código de acceso de deshabilitación o desconexión configurado. Una vez que se conoce la contraseña o el código de acceso, los usuarios finales pueden desinstalar, deshabilitar o desconectar GlobalProtect incluso si la configuración de la aplicación GlobalProtect normalmente no les permitiría hacerlo."
}
],
"lastModified": "2026-06-17T08:23:06.820",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5C73941F-EBEE-4A03-94A4-B4C7C96E4963",
"versionEndExcluding": "8.1.25",
"versionStartIncluding": "8.1.0"
},
{
"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89A55C5F-8E01-42C4-BE93-D683900C07BE",
"versionEndExcluding": "9.0.17",
"versionStartIncluding": "9.0.0"
},
{
"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "56181B13-327B-4249-A7E8-246B2420CEFC",
"versionEndExcluding": "9.1.16",
"versionStartIncluding": "9.1.0"
},
{
"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "71F1F86A-8158-4BE8-B509-5F50421DA829",
"versionEndExcluding": "10.0.12",
"versionStartIncluding": "10.0.0"
},
{
"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "18EE46C0-B863-4AE4-833C-05030D8AD1AF",
"versionEndExcluding": "10.1.9",
"versionStartIncluding": "10.1.0"
},
{
"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D61F01F8-1598-4078-9D98-BFF5B62F3BA5",
"versionEndExcluding": "10.2.4",
"versionStartIncluding": "10.2.0"
},
{
"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:11.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F3693A5-182E-4723-BE2A-062D0C9E736C"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B67C7EC3-6A0C-4068-A40C-3CA3CE670E02",
"versionEndExcluding": "5.1.12",
"versionStartIncluding": "5.1.0"
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4E58F8A-5040-432C-9B6B-1890F33A0FB3",
"versionEndExcluding": "5.2.13",
"versionStartIncluding": "5.2.0"
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4ACA99D7-01F8-4BEE-9CC9-AF8AA1121DAB",
"versionEndExcluding": "6.0.7",
"versionStartIncluding": "6.0.0"
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4BDBA4C-CEE9-4B47-82EE-3B58A04EB649",
"versionEndExcluding": "6.1.2",
"versionStartIncluding": "6.1.0"
},
{
"criteria": "cpe:2.3:a:paloaltonetworks:globalprotect:6.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "780045AA-5D59-4D8C-B742-B48B58DAD8F0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:paloaltonetworks:prisma_access:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FFB6FBC7-DEEB-4571-BCF9-92345A4B614A"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:paloaltonetworks:pan-os:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "456CB3CF-DCDA-4A0A-8DC0-72DBD713D3BE",
"versionEndExcluding": "10.2.9"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "psirt@paloaltonetworks.com"
}