CVE-2024-3383 is a high-severity vulnerability affecting Palo Alto Networks PAN-OS software. This flaw involves the improper processing of data received from Cloud Identity Engine (CIE) agents, leading to the modification of User-ID groups. As a result, users may experience inappropriate denial or allowance of access to network resources based on existing Security Policy rules. The vulnerability impacts various versions of PAN-OS software, posing a risk to a wide range of systems.

How do I know if I'm affected?

If you're using Palo Alto Networks PAN-OS software and have Cloud Identity Engine (CIE) enabled, you might be affected by the CVE-2024-3383 vulnerability. This issue can cause inappropriate denial or allowance of access to network resources. The affected versions are PAN-OS 11.0 (versions earlier than 11.0.3), PAN-OS 10.2 (versions earlier than 10.2.5), and PAN-OS 10.1 (versions earlier than 10.1.11). To check if you're affected, look for any unusual access behavior and verify if CIE is configured on your firewall web interface.

What should I do if I'm affected?

If you're affected by the CVE-2024-3383 vulnerability, update your PAN-OS software to a fixed version: 10.1.11, 10.2.5, or 11.0.3 and later. This will help prevent inappropriate access to network resources. Remember to always keep your software up-to-date to minimize security risks.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

The CVE-2024-3383 vulnerability is not listed in CISA's Known Exploited Vulnerabilities Catalog. This issue, related to improper group membership change in the Cloud Identity Engine (CIE) of Palo Alto Networks PAN-OS software, can lead to inappropriate denial or allowance of user access to network resources. The vulnerability was added to the National Vulnerability Database on April 10, 2024. No specific due date or required action is mentioned on the webpage.

Weakness enumeration

The weakness enumeration for this vulnerability is categorized as CWE-282 (Improper Ownership Management), which involves issues in how PAN-OS software processes data from Cloud Identity Engine agents, affecting user access to network resources.

For more details

For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, refer to the NVD or the links below.

• Palo Alto Networks Security Advisories