Palo Alto Networks Trust Protection Foundation Information Disclosure Vulnerability

A vulnerability allowing information disclosure has been identified in Palo Alto Networks Trust Protection Foundation. This issue enables an authenticated attacker to access sensitive information from the server's vault. Exploitation of this vulnerability could allow the attacker to impersonate any user in the environment and make arbitrary modifications to configuration settings.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive information, allowing an attacker to impersonate users and modify configuration settings without permission.

Remediation

Users can upgrade to Trust Protection Foundation version 25.3.3 or later, 25.1.8 or later, 24.3.6 or later, or 24.1.13 or later, depending on their current version.