CVE-2016-9151

Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows local users to gain privileges via crafted values of unspecified environment variables.

CVSS v3.0 NVD

7.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.21% chance of exploitation in the next 30 days, 68th percentile

Published

2016-11-19

Updated

2024-08-06

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/40789
• https://www.exploit-db.com/exploits/40788

Security advisories

• http://www.securityfocus.com/bid/94400
• http://www.securitytracker.com/id/1037381

References

• CVE Record
• NVD entry