CVE-2024-8691: PAN-OS: User Impersonation in GlobalProtect Portal
A vulnerability in the GlobalProtect portal in Palo Alto Networks PAN-OS software enables a malicious authenticated GlobalProtect user to impersonate another GlobalProtect user. Active GlobalProtect users impersonated by an attacker who is exploiting this vulnerability are disconnected from GlobalProtect. Upon exploitation, PAN-OS logs indicate that the impersonated user authenticated to GlobalProtect, which hides the identity of the attacker.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-8691?
CVE-2024-8691 is classified as a high-severity vulnerability due to the potential for user impersonation by attackers.
How do I fix CVE-2024-8691?
To fix CVE-2024-8691, upgrade the PAN-OS software to a version later than 9.1.17 or 10.1.11.
Who is affected by CVE-2024-8691?
CVE-2024-8691 affects authenticated users of the GlobalProtect portal running vulnerable versions of PAN-OS.
What types of systems are impacted by CVE-2024-8691?
CVE-2024-8691 impacts systems running Palo Alto Networks PAN-OS versions 9.1.0 through 9.1.17 and 10.1.0 through 10.1.11.
Can attackers exploit CVE-2024-8691 remotely?
CVE-2024-8691 requires that attackers be authenticated GlobalProtect users, limiting remote exploitation capabilities.