CVE-2024-3383

Published: Apr 10, 2024Modified: Jun 17, 2026

9.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Exploitability: 3.9 / Impact: 5.2

Source: NVD

Description

A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User-ID groups. This impacts user access to network resources where users may be inappropriately denied or allowed access to resources based on your existing Security Policy rules.

Affected (3)

Products: Paloaltonetworks: Pan Os

Paloaltonetworks

1 product

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Paloaltonetworks Pan Os	From 10.1.0 to 10.1.11
Paloaltonetworks Pan Os	From 10.2.0 to 10.2.5
Paloaltonetworks Pan Os	From 11.0.0 to 11.0.3

Related CWEs

Improper Ownership Management

The product assigns the wrong ownership, or does not properly verify the ownership, of an object or resource.

References (2)

https://security.paloaltonetworks.com/CVE-2024-3383

Source: psirt@paloaltonetworks.com

Vendor Advisory

https://security.paloaltonetworks.com/CVE-2024-3383

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.