Vulnerability · Published Apr 10, 2024 · Assigned by palo_alto
CVE-2024-3388PAN-OS: User Impersonation in GlobalProtect SSL VPN
Medium 4.1
In plain English
A medium-severity privilege mismanagement in Cloud NGFW from Palo Alto Networks. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 29% of all known vulnerabilities).
Severity (CVSS 3.1)4.1Medium
Exploit odds (30 days)0.3%top 71.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to internal assets. However, this vulnerability does not allow the attacker to receive response packets from those internal assets.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Palo Alto Networks | PAN-OS | 8.1.0 – before 8.1.269.0.0 – before 9.0.17-h49.1.0 – before 9.1.1710.1.0 – before 10.1.11-h410.2.0 – before 10.2.7-h311.0.0 – before 11.0.3 |
| Palo Alto Networks | Cloud NGFW | see references |
| Palo Alto Networks | Prisma Access | 10.2 – before 10.2.4 |
Weakness: CWE-269, CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N