NetSight
high7.4

CVE-2024-3383

A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User-ID group…

Impact

A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User-ID groups. This impacts user access to network resources where users may be inappropriately denied or allowed access to resources based on your existing Security Policy rules.

Affected products

VendorProductAffected versions
PaloaltonetworksPan-Os
from 10.1.0 before 10.1.11
from 10.2.0 before 10.2.5
from 11.0.0 before 11.0.3

Weakness classification

References