CVE-2024-5917CWE-918

PAN-OS: Server-Side Request Forgery in WildFire

Low · published November 14, 2024

CVSS v4.0
2.1
EPSS
0%
Percentile
39.8
In the wild
Unconfirmed
What it is

A server-side request forgery in PAN-OS software enables an authenticated attacker with administrative privileges to use the administrative web interface as a proxy, which enables the attacker to view internal network resources not otherwise accessible.

The record
Technical detail
CVSS v4.0
2.1 · LOW
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:N/VI:L/VA:N/SC:L/SI:N/SA:N/AU:N/R:A/V:D/RE:M/U:Amber
EPSS
0.00471 · 39.8th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2024-11-14T09:39Z
EPSS history
Timeline
  • 14 NOV 09:39Z
    PAN-OS: Server-Side Request Forgery in WildFire
    cvelistv5