CVE-2017-6356

Palo Alto Networks Terminal Services (aka TS) Agent 6.0, 7.0, and 8.0 before 8.0.1 uses weak permissions for unspecified resources, which allows attackers to obtain sensitive session information via unknown vectors.

• CWE-732

• http://www.securityfocus.com/bid/96925Third Party Advisory, VDB Entry, Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2017-6356Vendor Advisory
• http://www.securityfocus.com/bid/96925Third Party Advisory, VDB Entry, Vendor Advisory
• https://security.paloaltonetworks.com/CVE-2017-6356Vendor Advisory

Published

Mar 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6348The hashbin_delete function in net/irda/irqueue.c in the Lin…
• CVE-2017-6349An integer overflow at a u_read_undo memory allocation site …
• CVE-2017-6350An integer overflow at an unserialize_uep memory allocation …
• CVE-2017-6351The WePresent WiPG-1500 device with firmware 1.0.3.7 has a m…
• CVE-2017-6353net/sctp/socket.c in the Linux kernel through 4.10.1 does no…
• CVE-2017-6355Integer overflow in the vrend_create_shader function in vren…
• CVE-2017-6359QNAP QTS before 4.2.4 Build 20170313 allows attackers to gai…
• CVE-2017-6360QNAP QTS before 4.2.4 Build 20170313 allows attackers to gai…
• CVE-2017-6361QNAP QTS before 4.2.4 Build 20170313 allows attackers to exe…
• CVE-2017-6362Double free vulnerability in the gdImagePngPtr function in l…
• CVE-2017-6363In the GD Graphics Library (aka LibGD) through 2.2.5, there …8.1
• CVE-2017-6366Cross-site request forgery (CSRF) vulnerability in NETGEAR D…