Vulnerabilities > CVE-2024-3388 - Incorrect Authorization vulnerability in Paloaltonetworks Pan-Os

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
LOW
Confidentiality impact
NONE
Integrity impact
LOW
Availability impact
NONE
network
low complexity
paloaltonetworks
CWE-863

Summary

A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to internal assets. However, this vulnerability does not allow the attacker to receive response packets from those internal assets.

Vulnerable Configurations

Part Description Count
OS
Paloaltonetworks
179
Application
Paloaltonetworks
1

Common Weakness Enumeration (CWE)