{"uuid": "dcf10300-b9d0-4a76-8067-d6dc8d584053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2024-3400", "type": "seen", "source": "https://bsky.app/profile/mattimustang.com/post/3mte4xwsm6u24", "content": "Any threat actor who gets one of those files gets your LDAP service account and walks straight off the firewall into your AD.\n\nThis is not theoretical.\n\nPalo's own Unit 42 [3] documented attackers copying running-config.xml to a web-accessible path and retrieving it after exploiting CVE-2024-3400.", "creation_timestamp": "2026-08-18T11:39:11.773248Z"}