VULNERABILITY INTELLIGENCE

CVE-2017-6356

CVSS score5.3 MEDIUM

EPSS probability0.98%

CISA KEVNot currently listed

Published2017-03-20

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified resources, which allows attackers to obtain sensitive session information via unknown vectors.

Weakness classification

CWE-732: Incorrect Permission Assignment for Critical Resource

Primary references

cve@mitre.org — Third Party Advisory, VDB Entry, Vendor Advisory
cve@mitre.org — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory