Palo Alto PAN-OS CVE-2024-5918 Improper Certificate Validation Enables User Impersonation

From this webpage screenshot, the following key information about the vulnerability can be obtained: 1. Vulnerability ID: CVE-2024-5918 2. Vulnerability Name: PAN-OS: Improper Certificate Validation Enables Impersonation of a Legitimate GlobalProtect User 3. Vulnerability Description: An unauthorized user can connect to an affected GlobalProtect portal or GlobalProtect gateway using a specially crafted client certificate, thereby impersonating a legitimate user. This vulnerability exists only when "Allow authentication using user credentials or client certificate" is enabled. 4. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 5. Solution: Set the "Allow authentication using user credentials or client certificate" option to "No". 6. Vulnerability Type: CWE-295 Improper Certificate Validation 7. Vulnerability Severity: Low 8. Recommended Urgency: Medium 9. Exploitation Status: Palo Alto Networks is not aware of any malicious exploitation of this issue. 10. Affected Product Status: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 11. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 12. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 13. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 14. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 15. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 16. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 17. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 18. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 19. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 20. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 21. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 22. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 23. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 24. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 25. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 26. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 27. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 28. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 29. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 30. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 31. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 32. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 33. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 34. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 35. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions. 36. Affected Versions: PAN-OS 10.1.11, PAN-OS 10.2.4-h5, PAN-OS 10.2.5, PAN-OS 11.0.3, and all subsequent PAN-OS versions.

Goal Reached Thanks to every supporter — we hit 100%!

Palo Alto PAN-OS CVE-2024-5918 Improper Certificate Validation Enables User Impersonation