CVE-2024-3388

PAN-OS: User Impersonation in GlobalProtect SSL VPN

State: Published
Severity: 4.1 Medium
Published: Apr 10, 2024
Updated: Aug 1, 2024
Reserved: Apr 5, 2024

Description

A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to internal assets. However, this vulnerability does not allow the attacker to receive response packets from those internal assets.

Scores

CVSS	Score	Vector	Source
3.1	4.1 Medium	CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N	palo_alto

Weaknesses

CWE-269 Improper Privilege Management
CWE-863 Incorrect Authorization

Affected Products

Product	Versions
PAN-OSPalo Alto Networks	8.1.0 to before 8.1.26Affectedfrom 8.1.26Not affected 9.0.0 to before 9.0.17-h4Affectedfrom 9.0.17-h4Not affected 9.1.0 to before 9.1.17Affectedfrom 9.1.17Not affected 10.1.0 to before 10.1.11-h4Affectedfrom 10.1.11-h4Not affected 10.2.0 to before 10.2.7-h3Affectedfrom 10.2.7-h3Not affected 11.0.0 to before 11.0.3Affectedfrom 11.0.3Not affected 11.1.0Not affected
Cloud NGFWPalo Alto Networks	AllNot affected
Prisma AccessPalo Alto Networks	10.2 to before 10.2.4Affectedfrom 10.2.4Not affected

References

https://security.paloaltonetworks.com/CVE-2024-3388

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.