CVE-2024-3388CWE-269CWE-863

PAN-OS: User Impersonation in GlobalProtect SSL VPN

Medium · published April 10, 2024

CVSS v3.1
4.1
EPSS
0%
Percentile
27.3
In the wild
Unconfirmed
What it is

A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to internal assets. However, this vulnerability does not allow the attacker to receive response packets from those internal assets.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00349 · 27.3th percentile
Weaknesses
CWE-269 · Improper Privilege Management; CWE-863 · Incorrect Authorization
Published
2024-04-10T17:06Z
EPSS history
Timeline
  • 10 APR 17:06Z
    PAN-OS: User Impersonation in GlobalProtect SSL VPN
    cvelistv5