CVE-2018-9334

Severity: medium (CVSS 5.5 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-07-03 · updated 2026-06-17
Weakness: CWE-269

Description

The PAN-OS management web interface page in PAN-OS 6.1.20 and earlier, PAN-OS 7.1.16 and earlier, PAN-OS 8.0.8 and earlier, and PAN-OS 8.1.0 may allow an attacker to access the GlobalProtect password hashes of local users via manipulation of the HTML markup.

Affected products

Palo Alto Networks PAN-OS: from 6.0.0 (excl.) through 6.1.20; from 7.1.0 through 7.1.16; from 8.0.0 (excl.) through 8.0.8; 8.1.0

References

http://www.securityfocus.com/bid/104677
http://www.securitytracker.com/id/1041243
https://security.paloaltonetworks.com/CVE-2018-9334
http://www.securityfocus.com/bid/104677
http://www.securitytracker.com/id/1041243
https://security.paloaltonetworks.com/CVE-2018-9334

Get alerted when CVE-2018-9334 or the next vulnerability affects your stack