CVE-2023-22809 Impact of Sudo Vulnerability CVE-2023-22809
Attack Vector
Not applicable
Scope
Not applicable
Attack Complexity
Not applicable
Confidentiality Impact
NONE
Privileges Required
Not applicable
Integrity Impact
NONE
User Interaction
Not applicable
Availability Impact
NONE
Description
The Palo Alto Networks Product Security Assurance team has evaluated the sudo software vulnerability CVE-2023-22809 and has determined that the following Palo Alto Networks products do not expose the sudo program and, therefore, do not offer any scenarios required for successful exploitation of this vulnerability.
| CVE | Summary |
|---|---|
| CVE-2023-22809 | Conditions required for exploiting this vulnerability do not exist in Cloud NGFW, PAN-OS, Prisma Access, or Prisma SD-WAN. |
Product Status
| Versions | Affected | Unaffected |
|---|---|---|
| Cloud NGFW | None | All |
| PAN-OS | None | All |
| Prisma Access | None | All |
| Prisma SD-WAN ION | None | All |
Severity: NONE
CVSSv3.1 Base Score: 0 (CVSS:3.1/AV:P/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:N)
Exploitation Status
Palo Alto Networks is not aware of any malicious exploitation of this issue on any of our products.
Solution
No product updates are required for this vulnerability.
Timeline
Initial publication