CVE-2024-3383CWE-282

PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)

High · published April 10, 2024

CVSS v3.1
7.4
EPSS
1%
Percentile
46.8
In the wild
Unconfirmed
What it is

A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User-ID groups. This impacts user access to network resources where users may be inappropriately denied or allowed access to resources based on your existing Security Policy rules.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00576 · 46.8th percentile
Weakness
CWE-282 · Improper Ownership Management
Published
2024-04-10T17:06Z
EPSS history
Timeline
  • 10 APR 17:06Z
    PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE)
    cvelistv5