← CVE Intelligence

CVE-2024-3383

PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE) PUBLISHED

Description (CNA)

A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User-ID groups. This impacts user access to network resources where users may be inappropriately denied or allowed access to resources based on your existing Security Policy rules.

Affected (CNA)

Vendor / productVersions
Palo Alto Networks / PAN-OSunaffected 11.1.0; affected 11.0.0 before 11.0.3; affected 10.2.0 before 10.2.5; affected 10.1.0 before 10.1.11; unaffected 9.1.0; unaffected 9.0.0
Palo Alto Networks / Cloud NGFWunaffected All
Palo Alto Networks / Prisma Accessunaffected All

CWE

CWE-282

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.