medium4.3
CVE-2024-5918
An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a specially crafted client certificate t…
Impact
An improper certificate validation vulnerability in Palo Alto Networks PAN-OS software enables an authorized user with a specially crafted client certificate to connect to an impacted GlobalProtect portal or GlobalProtect gateway as a different legitimate user. This attack is possible only if you "Allow Authentication with User Credentials OR Client Certificate."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Paloaltonetworks | Pan-Os | from 10.1.0 before 10.1.11 from 10.2.0 through 10.2.4 from 11.0.0 before 11.0.3 Version 10.2.4 |