CVE-2024-2433CWE-269

PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability Loss

Medium · published March 13, 2024

CVSS v3.1
4.3
EPSS
1%
Percentile
46.1
In the wild
Unconfirmed
What it is

An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenticated read-only administrator to upload files using the web interface and completely fill one of the disk partitions with those uploaded files, which prevents the ability to log into the web interface or to download PAN-OS, WildFire, and content images.

This issue affects only the web interface of the management plane; the dataplane is unaffected.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00563 · 46.1th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2024-03-13T17:51Z
EPSS history
Timeline
  • 13 MAR 17:51Z
    PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability Loss
    cvelistv5