{"uuid": "d4e7a909-8d8a-4a59-adcb-1b416a7dcefe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/mattimustang.com/post/3mte4xwsm6t24", "content": "Any threat actor who gets one of those files gets your LDAP service account and walks straight off the firewall into your AD.\n\nThis is not theoretical.\n\nPalo's own Unit 42 [3] documented attackers copying running-config.xml to a web-accessible path and retrieving it after exploiting CVE-2024-3400.", "creation_timestamp": "2026-08-18T11:39:10.319444Z"}