VULNERABILITY INTELLIGENCE

CVE-2017-7945

CVSS score9.8 CRITICAL
EPSS probability1.84%
CISA KEVNot currently listed
Published2017-04-29
Last modified2026-06-17

Description

The GlobalProtect external interface in Palo Alto Networks PAN-OS before 6.1.17, 7.x before 7.0.15, 7.1.x before 7.1.9, and 8.x before 8.0.2 provides different error messages for failed login attempts depending on whether the username exists, which allows remote attackers to enumerate account names ... .