{"uuid": "2edf08da-6b18-4639-9a84-a4db56335f4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/mattimustang.com/post/3mte4xwsl7k24", "content": "Any threat actor who gets one of those files gets your LDAP service account and walks straight off the firewall into your AD.\n\nThis is not theoretical.\n\nPalo's own Unit 42 [3] documented attackers copying running-config.xml to a web-accessible path and retrieving it after exploiting CVE-2024-3400.", "creation_timestamp": "2026-08-18T11:39:08.492364Z"}