CVE-2024-2433

Improper Privilege Management (CWE-269)

Published: Mar 13, 2024 / Updated: 8mo ago

010
CVSS 4.3EPSS 0.04%Medium
CVE info copied to clipboard

An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenticated read-only administrator to upload files using the web interface and completely fill one of the disk partitions with those uploaded files, which prevents the ability to log into the web interface or to download PAN-OS, WildFire, and content images. This issue affects only the web interface of the management plane; the dataplane is unaffected.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

Timeline

CVE Assignment

NVD published the first details for CVE-2024-2433

Mar 13, 2024 at 11:15 AM
Detection in Vulnerability Scanners

Detection for the vulnerability has been added to Nessus (192031)

Mar 13, 2024 at 4:15 PM
First Article

Feedly found the first article mentioning CVE-2024-2433. See article

Mar 13, 2024 at 6:21 PM / National Vulnerability Database
Detection in Vulnerability Scanners

Detection for the vulnerability has been added to Qualys (731254)

Mar 14, 2024 at 5:16 AM
EPSS

EPSS Score was set to: 0.04% (Percentile: 7.2%)

Mar 14, 2024 at 2:43 PM
CVSS Estimate

Feedly estimated the CVSS score as MEDIUM

Aug 12, 2024 at 7:18 PM
Static CVE Timeline Graph

Affected Systems

Paloaltonetworks/pan-os
+null more

Links to Mitre Att&cks

T1548: Abuse Elevation Control Mechanism
+null more

Attack Patterns

CAPEC-122: Privilege Abuse
+null more

News

PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Lead...
This issue affects only the web interface of the management plane; the dataplane is unaffected. An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenticated read-only administrator to upload files using the web interface and completely fill one of the disk partitions with those uploaded files, which prevents the ability to log into the web interface or to download PAN-OS, WildFire, and content images.
Vigilance Vulnerability Alerts - Palo Alto Panorama: denial of service via Web uploads, analyzed on 14/03/2024
Our Vigilance Computer Vulnerability Alerts team determined that the severity of this threat note is medium. This weakness note impacts software or systems such as Palo Alto Firewall PA***, PAN-OS, Panorama by Palo Alto .
Focused Services Proactive Insights Newsletter - April 2024 Edition
The Palo Alto Network's Focused Services Customer Success Engineering team increased the security posture on Administrative Access to the Management interface of Panorama and Next Gen Firewall for a leading UK merchant banking group . The Palo Alto Networks Product Security Assurance team has published four high severity and three medium severity security advisories, six for PAN-OS and one for both PAN-OS and Prisma Access as part of the regular monthly "Patch Wednesday" on April 10th, 2024.
[no-title]
10 N CVE-2024-3400 PAN-OS: OS Command Injection Vulnerability in GlobalProtect none none none none All >= 11.1.2-h3 (See additional hotfixes in Solution section) >= 11.0.4-h1 (See additional hotfixes in Solution section) >= 10.2.9-h1 (See additional hotfixes in Solution section) All All all 2024-04-12 2024-04-15 8.3 N CVE-2024-3383 PAN-OS: Improper Group Membership Change Vulnerability in Cloud Identity Engine (CIE) none none none none All All >= 11.0.3 >= 10.2.5 >= 10.1.11 All all 2024-04-10 2024-04-10 8.2 N CVE-2024-3385 PAN-OS: Firewall Denial of Service (DoS) when GTP Security is Disabled Cloud NGFW PAN-OS 11.1 PAN-OS 11.0 PAN-OS 10.2 PAN-OS 10.1 PAN-OS 9.1 PAN-OS 9.0 Prisma Access none none none All All >= 11.0.3 >= 10.2.8 >= 10.1.12 >= 9.1.17 >= 9.0.17-h4 All 2024-04-10 2024-04-10 8.2 CVE-2024-3382 PAN-OS: Firewall Denial of Service (DoS) via a Burst of Crafted Packets none none none none All >= 11.1.2 >= 11.0.4 >= 10.2.7-h3 All All all 2024-04-10 2024-04-10 8.2 N CVE-2024-3384 PAN-OS: Firewall Denial of Service (DoS) via Malformed NTLM Packets none none none none All All All >= 10.0.12 >= 9.1.15-h1 >= 9.0.17 >= 8.1.24 all 2024-04-10 2024-04-10 6.9 N CVE-2024-3386 PAN-OS: Predefined Decryption Exclusions Does Not Work as Intended Cloud NGFW PAN-OS 11.1 PAN-OS 11.0 PAN-OS 10.2 PAN-OS 10.1 PAN-OS 10.0 PAN-OS 9.1 PAN-OS 9.0 Prisma Access none none none All All >= 11.0.1-h2, >= 11.0.2 >= 10.2.4-h2, >= 10.2.5 >= 10.1.9-h3, >= 10.1.10 >= 10.0.13 >= 9.1.17 >= 9.0.17-h2 All 2024-04-10 2024-04-10 6 CVE-2024-3387 PAN-OS: Weak Certificate Strength in Panorama Software Leads to Sensitive Information Disclosure none none none none All All >= 11.0.4 on Panorama >= 10.2.7-h3 on Panorama, >= 10.2.8 on Panorama >= 10.1.12 on Panorama All all 2024-04-10 2024-04-10 5.1 CVE-2024-3388 PAN-OS: User Impersonation in GlobalProtect SSL VPN Cloud NGFW PAN-OS 11.1 PAN-OS 11.0 PAN-OS 10.2 PAN-OS 10.1 PAN-OS 9.1 PAN-OS 9.0 PAN-OS 8.1 Prisma Access none none All All >= 11.0.3 >= 10.2.7-h3 >= 10.1.11-h4 >= 9.1.17 >= 9.0.17-h4 >= 8.1.26 >= 10.2.4 2024-04-10 2024-04-10 i PAN-SA-2024-0004 Informational Bulletin: OSS CVEs fixed in PAN-OS Versions prior to those listed above 2024-04-10 i PAN-SA-2024-0003 Informational Bulletin:
Rewterz Threat Advisory – Multiple Palo Alto Networks Vulnerabilities
Palo Alto Networks GlobalProtect app is vulnerable to a denial of service, caused by improper privilege management. Palo Alto Networks GlobalProtect app on Windows could allow a local authenticated attacker to gain elevated privileges on the system, caused by improper privilege management.
See 11 more articles and social media posts

CVSS V3.1

Attack Vector:Network
Attack Complexity:Low
Privileges Required:Low
User Interaction:None
Scope:Unchanged
Confidentiality:None
Integrity:None
Availability Impact:Low

Categories

Be the first to know about critical vulnerabilities

Collect, analyze, and share vulnerability reports faster using AI