Improper Authorization Vulnerability in Palo Alto Networks Panorama Software
CVE-2024-2433

4.3MEDIUM

Key Information:

Vendor

Palo Alto Networks
Status
Pan-os
Cloud Ngfw
Prisma Access
Vendor
CVE Published:
13 March 2024

Badges

👾 Exploit Exists📰 News Worthy

What is CVE-2024-2433?

An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenticated read-only administrator to upload files using the web interface and completely fill one of the disk partitions with those uploaded files, which prevents the ability to log into the web interface or to download PAN-OS, WildFire, and content images.

This issue affects only the web interface of the management plane; the dataplane is unaffected.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

PAN-OS Panorama 9.0 < 9.0.17-h4

PAN-OS Panorama 9.1 < 9.1.17

PAN-OS Panorama 10.1 < 10.1.12

News Articles

favicon imageRewterz

Rewterz Threat Advisory – Multiple Palo Alto Networks Vulnerabilities - Rewterz

Rewterz Threat Advisory – Multiple Palo Alto Networks Vulnerabilities

References

https://security.paloaltonetworks.com/CVE-2024-2433

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • 📰

    First article discovered by Rewterz

  • Vulnerability published

  • Vulnerability Reserved

Credit

Palo Alto Networks thanks Omar Eissa (https://de.linkedin.com/in/oeissa) for discovering and reporting this issue.
JSON
.