CVE-2016-9151

Palo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6.1.15, 7.0.x before 7.0.11, and 7.1.x before 7.1.6 allows local users to gain privileges via crafted values of unspecified environment variables.

Published: Nov 19, 2016
Updated: Apr 13, 2023
CVE: CVE-2016-9151
Severity: High
Exploit:

CVSS v3:

Severity: High
Score: 7.8
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2:

Severity: Low
Score: 4.6
AV:L/AC:L/Au:N/C:P/I:P/A:P

CWEs:

CWE-264

Affected Software
References

Software	From	Fixed in
paloaltonetworks / pan-os	5.0.0	5.0.20
paloaltonetworks / pan-os	6.0.0	6.0.15
paloaltonetworks / pan-os	6.1.0	6.1.15
paloaltonetworks / pan-os	7.0.0	7.0.11
paloaltonetworks / pan-os	7.1.0	7.1.6
paloaltonetworks / pan-os	5.1	5.1.13

http://www.securityfocus.com/bid/94400
http://www.securitytracker.com/id/1037381
https://security.paloaltonetworks.com/CVE-2016-9151
https://www.exploit-db.com/exploits/40788/
https://www.exploit-db.com/exploits/40789/

Vulnerability Database

CVE-2016-9151

Deep Security Visibility Without the Complexity