CVE-2024-8691

PAN-OS: User Impersonation in GlobalProtect Portal

State: Published
Severity: 5.3 Medium
Published: Sep 11, 2024
Updated: Sep 11, 2024
Reserved: Sep 11, 2024

Description

A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated GlobalProtect user to impersonate another GlobalProtect user. Active GlobalProtect users impersonated by an attacker who is exploiting this vulnerability are disconnected from GlobalProtect. Upon exploitation, PAN-OS logs indicate that the impersonated user authenticated to GlobalProtect, which hides the identity of the attacker.

Scores

CVSS	Score	Vector	Source
4.0	5.3 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/AU:Y/R:A/V:D/RE:M/U:Amber	palo_alto

Weaknesses

CWE-863 Incorrect Authorization

Affected Products

Product	Versions
PAN-OSPalo Alto Networks	9.1.0 to before 9.1.17Affectedfrom 9.1.17Not affected 10.1.0 to before 10.1.11Affectedfrom 10.1.11Not affected 10.2.0Not affected 11.0.0Not affected 11.1.0Not affected 11.2.0Not affected
Cloud NGFWPalo Alto Networks	AllNot affected
Prisma AccessPalo Alto Networks	AllNot affected

References

https://security.paloaltonetworks.com/CVE-2024-8691

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.