CVE-2024-3388

Published Apr 10, 2024

Last updated a month ago

Overview

Description
A vulnerability in the GlobalProtect Gateway in Palo Alto Networks PAN-OS software enables an authenticated attacker to impersonate another user and send network packets to internal assets. However, this vulnerability does not allow the attacker to receive response packets from those internal assets.
Source
psirt@paloaltonetworks.com
NVD status
Analyzed

Risk scores

CVSS 3.1

Type
Primary
Base score
5
Impact score
1.4
Exploitability score
3.1
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:L/A:N
Severity
MEDIUM

Weaknesses

psirt@paloaltonetworks.com
CWE-269
nvd@nist.gov
CWE-269

Social media

Hype score
Not currently trending

Configurations