CVE-2024-3383

CRITICAL Year: 2024
CVSS v3 Score
9.1
Critical
Weakness Type
CWE-282
View all →

Vulnerability Description

A vulnerability in how Palo Alto Networks PAN-OS software processes data received from Cloud Identity Engine (CIE) agents enables modification of User-ID groups. This impacts user access to network resources where users may be inappropriately denied or allowed access to resources based on your existing Security Policy rules.

Related Vulnerabilities

CVE-2024-8949

MEDIUM
CVSS:8.8(High)

A vulnerability classified as critical has been found in SourceCodester Online Eyewear Shop 1.0. This affects an unknown part of the file /classes/Master.php of the component Cart Content Handler. The...

CWE-2822024

CVE-2017-12189

HIGH
CVSS:7.8(High)

It was discovered that the jboss init script as used in Red Hat JBoss Enterprise Application Platform 7.0.7.GA performed unsafe file handling which could result in local privilege escalation. This iss...

CWE-2822017

CVE-2022-29187

HIGH
CVSS:7.8(High)

Git is a distributed revision control system. Git prior to versions 2.37.1, 2.36.2, 2.35.4, 2.34.4, 2.33.4, 2.32.3, 2.31.4, and 2.30.5, is vulnerable to privilege escalation in all platforms. An unsus...

CWE-2822022

CVE-2023-0386

HIGH
CVSS:7.8(High)

A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable...

CWE-2822023

CVE-2024-37999

HIGH
CVSS:7.8(High)

A vulnerability has been identified in Medicalis Workflow Orchestrator (All versions). The affected application executes as a trusted account with high privileges and network access. This could allow ...

CWE-2822024

CVE-2024-39755

HIGH
CVSS:7.8(High)

A privilege escalation vulnerability exists in the node update functionality of Veertu Anka Build 1.42.0. A specially crafted PKG file can lead to execute priviledged operation. An attacker can make a...

CWE-2822024