imPC@ndo IT

Tracker / CVE-2024-3383

CVE-2024-3383

High 7.4

A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User-ID groups. This impacts user access to network resources where users may be inappropriately denied or allowed access to resources based on your existing Security Policy rules.

Affected products and versions

paloaltonetworks pan-os · 10.1.0 → 10.1.11
paloaltonetworks pan-os · 10.2.0 → 10.2.5
paloaltonetworks pan-os · 11.0.0 → 11.0.3

Analysis

This page is not indexable yet.Until it carries original analysis — what it actually exposes, how to check in two minutes whether a system was touched, what to do if it was — the page stays noindex. The database decides that, not the template.

References