Skip to content
Sign in
6.9 Medium

CVE-2024-8687 An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user…

Description

An information exposure vulnerability exists in Palo Alto Networks PAN-OS software that enables a GlobalProtect end user to learn both the configured GlobalProtect uninstall password and the configured disable or disconnect passcode. After the password or passcode is known, end users can uninstall, disable, or disconnect GlobalProtect even if the GlobalProtect app configuration would not normally permit them to do so.

Affected products and versions

Product Affected versions Fixed in
PAN-OS 11.2 earliest → < 11.2.0 11.2.0
PAN-OS 11.1 earliest → < 11.1.0 11.1.0
PAN-OS 11.0 11.0.0 → < 11.0.1 11.0.1
PAN-OS 10.2 10.2.0 → < 10.2.4 10.2.4
PAN-OS 10.1 10.1.0 → < 10.1.9 10.1.9
PAN-OS 10.0 10.0.0 → < 10.0.12 10.0.12
PAN-OS 9.1 9.1.0 → < 9.1.16 9.1.16
PAN-OS 9.0 9.0.0 → < 9.0.17 9.0.17
PAN-OS 8.1 8.1.0 → < 8.1.25 8.1.25
Show the 8 other branches
Product Affected versions Fixed in
GlobalProtect App 6.3 earliest → < 6.3.0 6.3.0
GlobalProtect App 6.2 6.2.0 → < 6.2.1 6.2.1
GlobalProtect App 6.1 6.1.0 → < 6.1.2 6.1.2
GlobalProtect App 6.0 6.0.0 → < 6.0.7 6.0.7
GlobalProtect App 5.2 5.2.0 → < 5.2.13 5.2.13
GlobalProtect App 5.1 5.1.0 → < 5.1.12 5.1.12
Cloud NGFW Versions not published
Prisma Access 10.2 10.2.0 → latest No fix stated

Other CVEs of PAN-OS

The 197 CVEs of PAN-OS →
CVE-2026-0316 A stored cross-site scripting (XSS) vulnerability in Palo Alto Networks PAN-OS® software enables a malicious… 1.1 Low CVE-2026-0317 A denial of service vulnerability in Palo Alto Networks PAN-OS software enables an authenticated user with a read-only… 1.2 Low CVE-2026-0318 A stack-based buffer overflow vulnerability in the log processing functionality of Palo Alto Networks PAN-OS® software… 4.6 Medium CVE-2026-0319 An improper input handling vulnerability in the GlobalProtect™ gateway of Palo Alto Networks PAN-OS software enables… 4.9 Medium
Track this CVE